Package: samba
Version: 2:3.3.4-1
Severity: normal

Hello,

The fix for bug #496073 introduced the following two patches into the
codebase:

http://us3.samba.org/samba/ftp/patches/security/samba-3.2.2-CVE-2008-3789-1.patch
http://us3.samba.org/samba/ftp/patches/security/samba-3.2.2-CVE-2008-3789-2.patch

This prevents me from running connection reports as a non-user using
the smbstatus utility, as there are insufficient permissions to open
/var/run/samba/messages.tdb.

This is furthermore compounded by the problem of /var/run being cleaned
up on every reboot, so I any chmod 660/chgrp <authorised users> settings
are lost.

Currently the only way forward is for me to set SUID on smbstatus, and
by all standards this is a bad idea. Is there any better workaround for
this?

Ideally I'd like to have perms 660 on newly created files, and have
samba respect the SGID setting of /var/run/samba

Thank you



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to