/usr/local/samba/private/MACHINE.SID (PR#13642)

[Jeremy Allison]

r31dmaeu at netwman.RZ.UniBw-Muenchen.de wrote:
> 
> The document "Doing the NIS/NT Samba" on Linux World says that the file
> /usr/local/samba/private/MACHINE.SID should be owned by root and read-only
> for all other users.
> 
> The document "ENCRYPTION.txt" says that this directory should be owned by
> root and should have the permission 500. Therefore the file MACHINE.SID
> located
> in this directory will only be readable by the owner: root. Right ?
> 
> What is wrong ?

It's not really security-sensitive read information,
but it is security sensitive write information.

The text in ENCRYPTION.txt is a bit paranoid.

I'll fix it.

Jeremy Allison,
Samba Team.

-- 
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------