dsa

David Collier-Brown davec-b at rogers.com
Thu Aug 26 15:11:34 GMT 2004


Volker Lendecke wrote:
> So the only solution to gd's problem is to set the security descriptors in a
> sequence that goes from the low-level files up to the top-level ones, doing the
> share secdesc last, ensuring that the newly created files and directories are
> accessible until the secdesc is set. Hmm. Sounds nasty :-(
	
	And it makes samba the pretty-ordinary-unix-program
	into samba-the-priveleged-security-risk-sysadmin tool.

--dave



More information about the samba-technical mailing list