TNG 0.7 - can't join domain
Cole, Timothy D.
timothy_d_cole at md.northgrum.com
Tue Feb 29 18:21:53 GMT 2000
> -----Original Message-----
> From: Luke Kenneth Casson Leighton [SMTP:lkcl at samba.org]
> Sent: Tuesday, February 29, 2000 12:51
> To: Multiple recipients of list SAMBA-NTDOM
> Subject: Re: TNG 0.7 - can't join domain
>
> i'm not certain as to how to eliminate this, because according to some
> people we should _only_ be running as root, which is a security risk if we
> do it at the moment because there is no checking otheerwise on file access
> inside the msrpc code.
>
> i could "fix" this by doing an increment on become_root() instead of
> root_depth = 1 do root_depth++...
>
You'll have to be _real_ careful doing that, though -- it's entirely
possible that some code, somewhere, expects that it can always safely do
non-rooty things after it's called unbecome_root()... if that's been getting
called from code that itself becomes root...
More information about the samba-ntdom
mailing list