[PATCH] Hardening for the homes directory

[Andreas Schneider]

On Wednesday, 5 December 2018 11:22:17 CET Scott Lovenberg wrote:
> > On Dec 5, 2018, at 01:16, Andreas Schneider via samba-technical
> > <samba-technical at lists.samba.org> wrote:
> > 
> > On Tuesday, 4 December 2018 22:41:00 CET Jeremy Allison via
> > samba-technical
> > 
> > wrote:
> >> On Mon, Dec 03, 2018 at 12:54:14PM +0100, Ralph Böhme via samba-technical
> > 
> > wrote:
> >>>> On Mon, Dec 03, 2018 at 12:31:46PM +0100, Andreas Schneider wrote:
> >>>> I don't have that in the patchset. At which patch are you looking.
> >>> 
> >>> The one from your previous mail.
> >>> 
> >>>> Attaching again ...
> >>> 
> >>> This is a different version, but this one looks good. +1, please push.
> >> 
> >> Tests were buggy. Here's a fixed version I've pushed.
> > 
> > Thanks Jeremy!
> 
> Certainly I’m missing something, but if we’re following symlinks (server
> side config), the resolved path is never verified to not be ‘/‘ or
> something equally silly, is it?

But that would be a stupid admin using a symlink and not a software doing 
stupid things ...


	Andreas

-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D