[Samba] Strange share behavior

[Jeremy Allison]

On Thu, Mar 11, 2010 at 09:28:01AM -0500, Matthew Daubenspeck wrote:
> I am using Samba 3.5.0 on Arch Linux. I have security = user and am
> looking to create a new server with a lot of different shares as well as
> the [homes] share. So far my testing is making me pull my hair out...
> 
> If I create shares with certain users, everything works fine. However, I
> see that if I connect to the \\server, the user will see all shares.
> >From some google work, I can't see any way to limit that. I would prefer
> to only show shares that the user has access too, but I don't believe it
> is possible.
> 
> To remedy this, I tried to create a share called "share". Then create
> subdirectories under that using UNIX groups. I am using a group sticky
> bit in conjunction with create mask = 770 to keep the perms straight.
> Here is the share:
> 
> [share] 
>         nt acl support = no
>         path = /home/samba/share
>         writable = yes
>         guest ok = no
>         browsable = yes
>         create mask = 770
>         directory mask = 770
>         inherit permissions = yes
>         valid users = @share
>         hide dot files = yes
>         hide unreadable = yes
> 
> Hide unreadable works great, users cannot see any directories that they
> do not have access to. However, they can still create folders in the
> root of the share (/home/samba/share). I've even changed the perms of
> that directory to 000, and still users can create directories there. Am
> I missing something?

Bug in 3.5.0. Please ugrade to 3.5.1 and accept our apologies.

Jeremy.