VB: become_root remove patches (head)

Stephen Langasek vorlon at netexpress.net
Wed Aug 18 22:17:15 GMT 1999


On Thu, 19 Aug 1999, Luke Kenneth Casson Leighton wrote:

> ok.  you _could_ get away with splitting the passwords out of
> private/smbpasswd into:
> 
> private/DOMAIN.user1 owner user1 -rw-------
> private/DOMAIN.user2 owner user2 -rw-------
> ..

> and then individual users could change their own passwords.  they could
> also, unfortunately, _delete_ their own passwords by logging in to the
> samba server, cd private/, del DOMAIN.user1 oops! i can't log in any more
> *dur* :-)

I don't think this is actually a problem.  On a Unix system, the owner of a
file has access to modify the file's contents, but only the owner of the
directory it's in (or the superuser) has access to unlink (delete) the file.

They still have the option of foolishly overwriting the contents of the file
with bogus data...

-Steve Langasek
postmodern programmer



More information about the samba-technical mailing list