[SCM] Samba Shared Repository - branch master updated

Andrew Bartlett abartlet at samba.org
Sun Mar 10 05:01:02 MDT 2013

The branch, master has been updated
       via  287b5f6 param: Remove incorrectly added defaults in AD DC allowing WORLD WRITABLE files
      from  6ac0bdc Add testcase for idmap_rfc2307 module


- Log -----------------------------------------------------------------
commit 287b5f6c0f40d3e3d09bc2ce80f5fee02cbae40f
Author: Andrew Bartlett <abartlet at samba.org>
Date:   Fri Mar 8 16:49:21 2013 +1100

    param: Remove incorrectly added defaults in AD DC allowing WORLD WRITABLE files
    These defaults were incorrectly added in
    fc5caffbc139d63cab1ec105884863f73772586f in what turns out to be an
    incorrect fix for bug #9462, which was in turn introduced by the
    swapping of security mask (default 0777) for create mask (0755) in
    While the permissions on sysvol and netlogon (the default shares) were
    fixed by provision, any additional shares that did not yet have an
    explit ACL set would create world-writable files by default.
    Administrators will need to manually correct the file permissions on
    any additional shares that were created after installation of the AD
    Andrew Bartlett
    Reviewed-by: Michael Adam <obnox at samba.org>
    Autobuild-User(master): Andrew Bartlett <abartlet at samba.org>
    Autobuild-Date(master): Sun Mar 10 12:00:31 CET 2013 on sn-devel-104


Summary of changes:
 source3/param/loadparm.c |    2 --
 1 files changed, 0 insertions(+), 2 deletions(-)

Changeset truncated at 500 lines:

diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index ce1c1d8..75b63c5 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -3535,8 +3535,6 @@ static void init_locals(void)
 		lp_do_parameter(-1, "map readonly", "no");
 		lp_do_parameter(-1, "map archive", "no");
 		lp_do_parameter(-1, "store dos attributes", "yes");
-		lp_do_parameter(-1, "create mask", "0777");
-		lp_do_parameter(-1, "directory mask", "0777");

Samba Shared Repository

More information about the samba-cvs mailing list