TNG 0.7 - can't join domain

Cole, Timothy D. timothy_d_cole at md.northgrum.com
Tue Feb 29 18:21:53 GMT 2000


> -----Original Message-----
> From:	Luke Kenneth Casson Leighton [SMTP:lkcl at samba.org]
> Sent:	Tuesday, February 29, 2000 12:51
> To:	Multiple recipients of list SAMBA-NTDOM
> Subject:	Re: TNG 0.7 - can't join domain
> 
> i'm not certain as to how to eliminate this, because according to some
> people we should _only_ be running as root, which is a security risk if we
> do it at the moment because there is no checking otheerwise on file access
> inside the msrpc code.
> 
> i could "fix" this by doing an increment on become_root() instead of
> root_depth = 1 do root_depth++...
> 
	You'll have to be _real_ careful doing that, though -- it's entirely
possible that some code, somewhere, expects that it can always safely do
non-rooty things after it's called unbecome_root()... if that's been getting
called from code that itself becomes root...


More information about the samba-ntdom mailing list