Bug#783252: Document samba changes in regard to serving executable files to Windows clients

2015-04-24 Thread Justin B Rye
(Oops, slightly delayed by a powercut.  Hurrah for FS journals.)

Niels Thykier wrote:
 +section
 +  titleSamba4 requires exec-bit to permit files to be open for 
 execution/title
 +  para

s/open/opened/, and I don't think people say exec-bit (just
executable bit).

 titleSamba4 requires executable bit to permit files to be opened for 
execution/title

Or maybe it could be shortened to

 titleNew requirements for file execution in Samba/title

 +If a client requests for a file to be opened for execution, then
 +Samba4 will require that the file have the exec-bit set on the
 +file in addition to the regular read permissions.  This also
 +causes netlogon scripts to be silently ignored if they lack this
 +exec-bit.

   If a client requests that a file should be opened for execution,
   Samba4 will require the executable bit to be set on the
   file in addition to the regular read permissions.  This also
   causes netlogon scripts to be silently ignored if they lack this
   executable bit.
-- 
JBR with qualifications in linguistics, experience as a Debian
sysadmin, and probably no clue about this particular package
Index: issues.dbk
===
--- issues.dbk	(revision 10842)
+++ issues.dbk	(working copy)
@@ -966,13 +966,13 @@
   /section
 /section
 section
-  titleSamba4 requires exec-bit to permit files to be open for execution/title
+  titleNew requirements for file execution in Samba4/title
   para
-If a client requests for a file to be opened for execution, then
-Samba4 will require that the file have the exec-bit set on the
+If a client requests that a file should be opened for execution,
+Samba4 will require the executable bit to be set on the
 file in addition to the regular read permissions.  This also
 causes netlogon scripts to be silently ignored if they lack this
-exec-bit.
+executable bit.
   /para
 /section
 /chapter


Bug#783252: Document samba changes in regard to serving executable files to Windows clients

2015-04-24 Thread Mario Lipinski

Package: release-notes

Hi,

Jessie will release with Samba 4 containing lots of changes. While the 
default configuration will be mostly backwards compatible I belief the 
following change noteworthy in the release notes: Windows may ask to 
open a file for execution. While with Samba 3 this was implied by the 
user being allowed to read the file, Samba 4 evaluates the unix 
executable bit and rejects such open a file for execution requests if 
the executable bit is not set. This will e.g. lead to netlogon scripts 
to be silently ignored by Windows clients if no executable bit is set 
and also execution of other executables and scripts is rejected if the 
unix executable bit is not set on the files.


Since this caused quite some hard time for me to figure out I would 
consider it noteworthy in the release notes.


Mario


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#783252: Document samba changes in regard to serving executable files to Windows clients

2015-04-24 Thread Niels Thykier
Control: tags -1 pending

On 2015-04-24 18:22, Mario Lipinski wrote:
 Package: release-notes
 
 Hi,
 
 Jessie will release with Samba 4 containing lots of changes. While the
 default configuration will be mostly backwards compatible I belief the
 following change noteworthy in the release notes: Windows may ask to
 open a file for execution. While with Samba 3 this was implied by the
 user being allowed to read the file, Samba 4 evaluates the unix
 executable bit and rejects such open a file for execution requests if
 the executable bit is not set. This will e.g. lead to netlogon scripts
 to be silently ignored by Windows clients if no executable bit is set
 and also execution of other executables and scripts is rejected if the
 unix executable bit is not set on the files.
 
 Since this caused quite some hard time for me to figure out I would
 consider it noteworthy in the release notes.
 
 Mario
 

Thanks for reporting this issue!

I have applied the following patch to the SVN.  I hope you will spare a
moment to review the text and possibly suggest improvements.

Thanks,
~Niels


From 9c40e4de324611243b6ac4d5a912b0d1823cf737 Mon Sep 17 00:00:00 2001
From: nthykier nthykier@313b444b-1b9f-4f58-a734-7bb04f332e8d
Date: Fri, 24 Apr 2015 17:07:59 +
Subject: [PATCH] issues: Document Samba4 exec-bit requirement (#783252)

Signed-off-by: Niels Thykier ni...@thykier.net

git-svn-id: svn+ssh://svn.debian.org/svn/ddp/manuals/trunk/release-notes@10838 313b444b-1b9f-4f58-a734-7bb04f332e8d
---
 en/issues.dbk | 10 ++
 1 file changed, 10 insertions(+)

diff --git a/en/issues.dbk b/en/issues.dbk
index f14314c..a383b7a 100644
--- a/en/issues.dbk
+++ b/en/issues.dbk
@@ -965,4 +965,14 @@ echo 'base-passwd base-passwd/system/replaceableusername/replaceable/shell/
 /para
   /section
 /section
+section
+  titleSamba4 requires exec-bit to permit files to be open for execution/title
+  para
+If a client requests for a file to be opened for execution, then
+Samba4 will require that the file have the exec-bit set on the
+file in addition to the regular read permissions.  This also
+causes netlogon scripts to be silently ignored if they lack this
+exec-bit.
+  /para
+/section
 /chapter
-- 
2.1.4



Bug#783252: Document samba changes in regard to serving executable files to Windows clients

2015-04-24 Thread Niels Thykier
On 2015-04-24 20:19, Justin B Rye wrote:
 (Oops, slightly delayed by a powercut.  Hurrah for FS journals.)
 
 Niels Thykier wrote:
 +section
 +  titleSamba4 requires exec-bit to permit files to be open for 
 execution/title
 +  para
 
 s/open/opened/, and I don't think people say exec-bit (just
 executable bit).
 
  titleSamba4 requires executable bit to permit files to be opened for 
 execution/title
 
 Or maybe it could be shortened to
 
  titleNew requirements for file execution in Samba/title
 
 +If a client requests for a file to be opened for execution, then
 +Samba4 will require that the file have the exec-bit set on the
 +file in addition to the regular read permissions.  This also
 +causes netlogon scripts to be silently ignored if they lack this
 +exec-bit.
 
If a client requests that a file should be opened for execution,
Samba4 will require the executable bit to be set on the
file in addition to the regular read permissions.  This also
causes netlogon scripts to be silently ignored if they lack this
executable bit.
 

Thanks, applied as-is.

~Niels


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org