[PATCH] vfs_retention: add this module to make a share read only with a special time period.

Li, Dan lidan at cn.fujitsu.com
Wed Oct 11 06:07:44 UTC 2017


Hi, Jeremy

> In order to truely prevent *all* share modification you need to also trap
> and deny SMB_VFS_LINK, SMB_VFS_MKNOD, SMB_VFS_NTIMES, and SMB_VFS_SYMLINK
> calls.
What should I do to trap these macros?
I am sorry I cannot get your point...
I think this module is an individual module which has nothing to modify with all above macros...


Regards, 
Li Dan


> -----Original Message-----
> From: Jeremy Allison [mailto:jra at samba.org]
> Sent: Wednesday, October 11, 2017 1:25 AM
> To: Li, Dan/李 丹 <lidan at cn.fujitsu.com>
> Cc: samba-technical at lists.samba.org
> Subject: Re: [PATCH] vfs_retention: add this module to make a share read
> only with a special time period.
> 
> On Tue, Oct 10, 2017 at 01:24:05AM +0000, Li, Dan via samba-technical wrote:
> > Hi,
> >
> > I create a pull request for the previous discussion about a new module
> to implement the worm feature with a special time period.
> >
> > Please review and maybe push it...
> > Thanks very much!
> >
> > https://github.com/samba-team/samba/pull/98
> 
> In order to truely prevent *all* share modification you need to also trap
> and deny SMB_VFS_LINK, SMB_VFS_MKNOD, SMB_VFS_NTIMES, and SMB_VFS_SYMLINK
> calls.
> 
> With all these trapped I don't think any client can modify the filesystem.
> 






More information about the samba-technical mailing list