[Pkg-kde-extras] Bug#574269: smb4k serious issue wrt cifs

Alexander Reinholdt alexander.reinholdt at t-online.de
Wed Mar 17 17:50:28 UTC 2010


Hello Fathi,

thank you for bringing this to my attention. I need some time to investigate 
this issue, check what options are available and modify the code accordingly.

A quick check showed that using sudo and mount.cifs & umount would work (you 
need no entry in /etc/fstab in this case), but this is not really a solution 
for users who cannot gain super user privileges to change /etc/sudoers.

fusesmb seems to need a lot of configuration (I haven't used it until now). 
Maybe this is the way to go, but I'm a bit reluctant to implement support for 
it...

Best regards
Alexander

Am Mittwoch, 17. März 2010 schrieb Fathi Boudra:
> Hi Alexander,
> 
> The following bug has been reported:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574269
> 
> The related changes was done on cifs-utils:
> cifs-utils (2:4.0-1) unstable; urgency=low
> 
>   * As of this version, the mount.cifs binary is no longer setuid due to
>     upstream concerns about the audit status of this code.  As a
>  consequence, users will no longer be able to run mount.cifs directly to
>  mount shares unless mount points have been individually configured in
>  /etc/fstab with the "user" mount option.
> 
>     Sites that require their users to retain the ability to mount arbitrary
>     CIFS shares without system-level configuration may want to consider
>  using the fusesmb package instead.
> 
>  -- Steve Langasek <vorlon at debian.org>  Sun, 28 Feb 2010 16:07:14 -0800
> 
> It seems smb4k should migrate to fusesmb or maybe you have a better
>  proposal ?
> 
> Cheers,
> 
> Fathi
> 


-- 
"Never argue with idiots. They drag you down to their level and beat you with 
experience..." (unknown)





More information about the pkg-kde-extras mailing list