On Sat, 29 May 2010, Christian PERRIER wrote:
Quoting Debian BTS (debb...@busoni.debian.org):
possible security breach
Where?

you are unable to unmount a remote volume, that could ave been mounted with permisison wider than the ones on the romote one.

Package: smbfs
Version: 2:3.2.5-4lenny11
Severity: grave
Justification: causes non-serious data loss - locks machine on shutdown =

? How both could be related?

If you have to shutdown the host the only way I managed was to turn off the power, this could make problem on unsaved files.


after mounting as an ordinary user on a subdirectory of his home directory a
volume on a windows2000 PDC this network volume become unmountable since
smbumount (as well umount) tell that only cifs shares can be umounted.
Upon shutdown of the machine the unmountable share provokes a lock requiring
a complete poweroff to complete shutdown.
Please provide the full sequence of events.
How did the user mount the volume? By using which command?

user$ cd ~ ; mkdir loc
user$ smbmount \\\\WIN2KSERVER\\SHARE loc
user$ less loc/sub/file.log
user$ smbumount loc   ->  says that can umount only cifs

What's the content of /etc/fstab?

# /etc/fstab: static file system information.
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
proc            /proc           proc    defaults        0       0
/dev/sda1       /               ext3    defaults,errors=remount-ro 0       1
/dev/sdb1       /backup         ext3    defaults        0       2
/dev/sdb2       /home           ext3    defaults        0       2
/dev/sda5       /var            ext3    defaults        0       2
/dev/sda6       /var/mail       ext3    defaults        0       2
/dev/sda2       none            swap    sw              0       0
/dev/hda        /media/cdrom0   udf,iso9660 user,noauto     0       0
)

Is the volume mounted as smbfs or cifs?
smbfs





--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to