[PATCH] vfs_retention: add this module to make a share read only with a special time period.

Jeremy Allison jra at samba.org
Tue Oct 10 17:25:08 UTC 2017


On Tue, Oct 10, 2017 at 01:24:05AM +0000, Li, Dan via samba-technical wrote:
> Hi,
> 
> I create a pull request for the previous discussion about a new module to implement the worm feature with a special time period.
> 
> Please review and maybe push it... 
> Thanks very much!
> 
> https://github.com/samba-team/samba/pull/98

In order to truely prevent *all* share modification
you need to also trap and deny SMB_VFS_LINK, SMB_VFS_MKNOD,
SMB_VFS_NTIMES, and SMB_VFS_SYMLINK calls.

With all these trapped I don't think any client can modify the
filesystem.



More information about the samba-technical mailing list