[Samba] Re: using samba as nfs server replacement?

Michael Heydon michaelh at jaswin.com.au
Mon Apr 28 00:01:24 GMT 2008

Helmut Hullen wrote:
> Hallo, Michael,
> <snip>
>> If we assume that cifs unix
>> extensions can be made to work, I could bring in my laptop which
>> contains a SUID root binary and mount it to my workstation.
> But (regarding my error correction): ypu always can set the SUID flag on  
> your laptop's "mount.cifs"!
> The server has to decide wether it will accept the mount try.
Sorry,  maybe I wasn't clear. If I bring in my laptop that is setup as a 
samba server, then I could, for example, put a copy of bash on a share 
on my laptop and make the bash binary SUID root (because of course, I 
have root on my laptop). If I can then get my workstation to mount a 
share from my laptop, I can run that copy of bash from the network share 
and gain full root access to the workstation.

Sudo would probably offer a way around this.

> Viele Gruesse!
> Helmut

*Michael Heydon - IT Administratorr *
michaelh at jaswin.com.au <mailto:michaelh at jaswin.com.au>

More information about the samba mailing list