Re: Samba Remote Zero-Day Exploit

Subject: Re: Samba Remote Zero-Day Exploit

Dear Kingcope,

The samba server follows symlinks by default. There are options
("follow symlinks", "wide links") for turning it off:

The "problem" at your installation seems a mis-configuration of
your server: please ask the admin to set "secure" options.
(Some samba installations, like mine, wish to allow same access as a
UNIX login would allow. Some shares like [home] are provided for ease
of use, users are encouraged to create symlinks to other "interesting"
places e.g. NFS-mounted directories.)

Cheers, Paul

Paul Szabo
School of Mathematics and Statistics   University of Sydney    Australia

Copyright © 1995-2020 All rights reserved.