[linux-cifs-client] Error's opening credentials file.

[Stef Bon]

Yes, I will do that.

First I would like to know what this libcap(-ng) is for.
I've read the website, but can you give some explanation?

The website is mentioning the security and the dropping of privileges.
What does this
mean in respect to the cifs utils? You're dropping privileges or you
don't, that's (not the question)
a decision an app makes. Is an extra library required to do so?


Stef Bon


2010/4/3 Jeff Layton <jlayton at samba.org>:
> On Sat, 3 Apr 2010 12:26:38 +0200
> Stef Bon <stefbon at gmail.com> wrote:
>
>> Yes,
>>
>> it's working again like it did. The previouis version I used was cifs-utils 4.0.
>>
>> Now the cred file is  /home/sbon/.smb/moun.cred again, and no problem.
>>
>> It was compiling using the libcap package, automatically.
>>
>> Thanks,
>>
>> Stef
>>
>>
>> 2010/4/2 Jeff Layton <jlayton at samba.org>:
>> > On Fri, 2 Apr 2010 15:12:12 -0400
>> > Jeff Layton <jlayton at samba.org> wrote:
>> >
>> >> On Fri, 2 Apr 2010 17:11:20 +0200
>> >> Stef Bon <stefbon at gmail.com> wrote:
>> >>
>>
>> >> >
>> >> > IT's not such a big problem, I've got it working again, but it should
>> >> > be documented.
>> >> >
>> >> > Stef
>> >>
>> >> What was the last version on which this worked? Are you mount.cifs as a
>> >> setuid root program? Is mount.cifs linked against libcap?
>> >>
>> >
>> > Does the attached patch fix the problem?
>> >
>> > --
>> > Jeff Layton <jlayton at samba.org>
>> >
>>
>
> Ok, I've gone ahead and pushed some patches into the git repo that
> should fix this and still keep CAP_DAC_OVERRIDE exposure to a minimum.
> Please test it if you're able and let me know whether the problem is
> still fixed.
>
> I'm starting to wonder whether it would be better though to switch this
> code to use libcap-ng:
>
>     http://people.redhat.com/sgrubb/libcap-ng/
>
> ...the older libcap is pretty cumbersome.
>
> --
> Jeff Layton <jlayton at samba.org>
>