[Pkg-samba-maint] Bug#678616: default guest user "nobody"

email.bug at arcor.de email.bug at arcor.de
Sat Jun 23 09:27:34 UTC 2012

Package: samba

The default user used by samba to create files of guest users currently
is "nobody", however the filesystem should never contain anything 
belonging to the nobody/nogroup. (see Bug #290623)

Other reasons to rethink the impersonation of nobody, are practical
problems in accessing files created by samba guest users.

May I suggest to introduce a proper samba-guest user and
default to create files of guests on the local filesystem as "samba-guest"
and the (general)  "users" group. (with the default umask 002)

As all real users are supposed to be in the users group this should 
give users full access to the files locally just as through samba.
While at the same time the files are still inaccessible to potentially
vulnerable (system user) deamon processes.

NB: Bug #678615 ("users" group is empty)

More information about the Pkg-samba-maint mailing list