[Samba] [PATCH v2 0/2] cifs.upcall: allow cifs.upcall to grab $KRB5CCNAME from initiating process

Simo Sorce simo at redhat.com
Tue Feb 14 22:33:07 UTC 2017


On Tue, 2017-02-14 at 13:23 -0500, Jeff Layton wrote:
> Small respin of the patches that I posted a few days ago. The main
> difference is the reordering of the series to make it do the group
> and grouplist manipulation first, and then the patch that makes
> it grab the KRB5CCNAME from the initiating process.
> 
> I think the code is sound, my main question is whether we really
> need the command-line switch for this. Should this just be the
> default mode of operation?
> 
> Jeff Layton (2):
>   cifs.upcall: switch group IDs when handling an upcall
>   cifs.upcall: allow scraping of KRB5CCNAME out of initiating task's
>     /proc/<pid>/environ file
> 
>  cifs.upcall.8.in |  10 +++
>  cifs.upcall.c    | 185
> +++++++++++++++++++++++++++++++++++++++++++++++++++++--
>  2 files changed, 189 insertions(+), 6 deletions(-)

I think I'd make it the default, but maybe leave a way to disable env
scraping with a reverse flag.

Simo.



More information about the samba mailing list