[Pkg-samba-maint] Bug#527576: Bug#527576: samba: Fixes introduced in #496073 prevent usage of smbstatus by a non-root user

Christian Perrier Christian.Perrier at onera.fr
Fri May 8 17:29:18 UTC 2009


Quoting Peter Rabbitson (rabbit+bugs at rabbit.us):
> Package: samba
> Version: 2:3.3.4-1
> Severity: normal
> 
> 
> Hello,
> 
> The fix for bug #496073 introduced the following two patches into the
> codebase:
> 
> http://us3.samba.org/samba/ftp/patches/security/samba-3.2.2-CVE-2008-3789-1.patch
> http://us3.samba.org/samba/ftp/patches/security/samba-3.2.2-CVE-2008-3789-2.patch
> 
> This prevents me from running connection reports as a non-user using
> the smbstatus utility, as there are insufficient permissions to open
> /var/run/samba/messages.tdb.


I need to be convinced that the output of smbstatus isn't something
sensitive.

So, as of now, I don't see this as a bug per se and I'm fairly sure
that we'll have hard times convincing upstream to change anything
here...

Other maitnainers, comments?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20090508/e284a3b7/attachment.pgp>


More information about the Pkg-samba-maint mailing list