Re: Error's opening credentials file.
Stef Bon <[email protected]>
| Newsgroups | gmane.linux.file-systems.cifs |
|---|---|
| Message-ID | <[email protected]> |
Yes, I will do that. First I would like to know what this libcap(-ng) is for. I've read the website, but can you give some explanation? The website is mentioning the security and the dropping of privileges. What does this mean in respect to the cifs utils? You're dropping privileges or you don't, that's (not the question) a decision an app makes. Is an extra library required to do so? Stef Bon 2010/4/3 Jeff Layton <[email protected]>: > On Sat, 3 Apr 2010 12:26:38 +0200 > Stef Bon <[email protected]> wrote: > >> Yes, >> >> it's working again like it did. The previouis version I used was cifs-utils 4.0. >> >> Now the cred file is /home/sbon/.smb/moun.cred again, and no problem. >> >> It was compiling using the libcap package, automatically. >> >> Thanks, >> >> Stef >> >> >> 2010/4/2 Jeff Layton <[email protected]>: >> > On Fri, 2 Apr 2010 15:12:12 -0400 >> > Jeff Layton <[email protected]> wrote: >> > >> >> On Fri, 2 Apr 2010 17:11:20 +0200 >> >> Stef Bon <[email protected]> wrote: >> >> >> >> >> > >> >> > IT's not such a big problem, I've got it working again, but it should >> >> > be documented. >> >> > >> >> > Stef >> >> >> >> What was the last version on which this worked? Are you mount.cifs as a >> >> setuid root program? Is mount.cifs linked against libcap? >> >> >> > >> > Does the attached patch fix the problem? >> > >> > -- >> > Jeff Layton <[email protected]> >> > >> > > Ok, I've gone ahead and pushed some patches into the git repo that > should fix this and still keep CAP_DAC_OVERRIDE exposure to a minimum. > Please test it if you're able and let me know whether the problem is > still fixed. > > I'm starting to wonder whether it would be better though to switch this > code to use libcap-ng: > > http://people.redhat.com/sgrubb/libcap-ng/ > > ...the older libcap is pretty cumbersome. > > -- > Jeff Layton <[email protected]> > _______________________________________________ linux-cifs-client mailing list [email protected] https://lists.samba.org/mailman/listinfo/linux-cifs-client