[Pkg-samba-maint] Bug#496073: samba: group_mapping.ldb created world writeable after manual deletion

[Sascha Herrmann]

Package: samba
Version: 2:3.2.0-4
Severity: normal

After removing the group_mapping.tdb file in /var/lib/samba, samba recreates
this file with the permissions set to 0666, allowing everybody with access
to the system to modify this file. I think this isn't a good idea. I removed
this file on a system I cloned from a working system because I wanted to be
sure there are no cached informations of the domain the original system was
a member of.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.18-6-xen-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages samba depends on:
ii  adduser              3.108               add and remove users and groups
ii  debconf [debconf-2.0 1.5.22              Debian configuration management sy
ii  libacl1              2.2.47-2            Access control list shared library
ii  libattr1             1:2.4.43-1          Extended attribute shared library
ii  libc6                2.7-13              GNU C Library: Shared libraries
ii  libcomerr2           1.41.0-3            common error description library
pi  libcups2             1.3.8-1             Common UNIX Printing System(tm) - 
ii  libgnutls26          2.4.1-1             the GNU TLS library - runtime libr
ii  libkrb53             1.6.dfsg.4~beta1-3  MIT Kerberos runtime libraries
ii  libldap-2.4-2        2.4.10-3            OpenLDAP libraries
ii  libpam-modules       1.0.1-2             Pluggable Authentication Modules f
ii  libpam-runtime       1.0.1-2             Runtime support for the PAM librar
ii  libpam0g             1.0.1-2             Pluggable Authentication Modules l
ii  libpopt0             1.14-4              lib for parsing cmdline parameters
ii  libtalloc1           1.2.0~git20080616-1 hierarchical pool based memory all
ii  libwbclient0         2:3.2.0-4           client library for interfacing wit
ii  logrotate            3.7.1-3             Log rotation utility
ii  lsb-base             3.2-19              Linux Standard Base 3.2 init scrip
ii  procps               1:3.2.7-8           /proc file system utilities
ii  samba-common         2:3.2.0-4           Samba common files used by both th
ii  update-inetd         4.30+nmu1           inetd configuration file updater
ii  zlib1g               1:1.2.3.3.dfsg-12   compression library - runtime

samba recommends no packages.

Versions of packages samba suggests:
ii  openbsd-inetd [inet-superse 0.20080125-1 The OpenBSD Internet Superserver
pn  smbldap-tools               <none>       (no description available)

-- debconf information:
* samba/run_mode: daemons
  samba/tdbsam: false
* samba/generate_smbpasswd: true