[Samba] Re: Restricting file types

[Jim C.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've been trying to glob up a veto that will block everything *except*
files of a certain type.  Specifically, the exception is desktop
shortcuts, i,e. "*.lnk".  Here is what I've come up with but it is not
working.  It *does* work from the command line with the ls command:

veto files = /*[^.lnk]/

Any ideas?

I've also got a nifty setup that dumps all user files that *are not*
desktop links into the users trash bin in thier unix home directory.
These files, of course, can be found on the homes share if they were
important but they are no longer downloaded every doggone time the user
logs in.

Have a look.  You can find it here under "Performance issues":
http://mandrake.vmlinuz.ca/bin/view/Main/SambaThreeDomainController

Note that the install script is distro specific, but there are only 2
files of interest anyway.


Jim C.

| This works well for file servers only, but there is a way round it which
| might be good to bear in mind -
| Say you have blocked /*.php/*.asp/ to prevent samba users making scripts
| on your web server (i am guessing that you have shared your webroot?)
| Now make a php file, rename it to file.txt and move it to the server -
| no problem. Once it is on the server, rename it to file.php. The file
| disappears, but only to samba users - the file is still there named
| file.php and can be accessed by anything other than samba (ie apache)


- --

- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings at hotmail.com  AIM: WyteLi0n  ICQ: 123291844 	|
|---------------------------------------------------------------|
| Y!: j_c_llings               Jabber: jcllings at njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA7uOp57L0B7uXm9oRAiZkAJ9UZILaJf0AerNk206GXwnFeDH7cgCeJJ2+
ZX7Us7T1EwT1E84YEa6e9fM=
=zals
-----END PGP SIGNATURE-----