[Samba] Mysterious changes to smb.conf file

[Günter Kukkukk]

Am 02.07.2014 04:11, schrieb Steve Bergman:
> Hi,
> 
> At 06:25AM yesterday morning (which was the time of the log file rotation) several of my shares became unavailable. In several places in the
> /etc/samba/smb.conf file, the following lines had been added, *outside* of the stanzas defining the shares.
> 
> available = no
> browsable = no
> public = no
> 
> I did not add these. smbd also restarted at that time. I'm still Googling for answers. But I wanted to ask here ASAP due to security considerations.
> This machine is not Internet-facing, but still I'm concerned.
> 
> -Steve Bergman
> 
> 
> ==========
> 
> I take it, then, that no one sees any obvious reason that:
> 
> available = no
> browsable = no
> public = no
> 
> should be inserted into several places in my smb.conf file without my doing it myself? Does smbd itself ever make changes to the smb.conf file? I've
> never observed it to. But this situation is a bit... odd.
> 
> -Steve

cause those were inserted at several places it's very unlikely, but
check whether you use any "include" statement in your smb.conf.
Some distros use some own include statements, which often point to
empty files - but sometimes not ...

Just a wild guess.

Cheers, Günter
--