[PATCH] vfs_retention: add this module to make a share read only with a special time period.

Volker Lendecke Volker.Lendecke at SerNet.DE
Wed Oct 11 09:22:08 UTC 2017


On Wed, Oct 11, 2017 at 06:07:44AM +0000, Li, Dan via samba-technical wrote:
> Hi, Jeremy
> 
> > In order to truely prevent *all* share modification you need to also trap
> > and deny SMB_VFS_LINK, SMB_VFS_MKNOD, SMB_VFS_NTIMES, and SMB_VFS_SYMLINK
> > calls.
> What should I do to trap these macros?
> I am sorry I cannot get your point...
> I think this module is an individual module which has nothing to modify with all above macros...

All those entry points make modifications to the share possible. To be
safe, they should obey the same restrictions as create_file does. With
SMB2, it might not be an issue, but with SMB1 it definitely is.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de



More information about the samba-technical mailing list