869af6a3d7
This is a security release in order to address CVE-2009-2813, CVE-2009-2948
and CVE-2009-2906.
Please note that Samba 3.0 is not maintained any longer. This security
release is shipped on a voluntary basis.
o CVE-2009-2813:
In all versions of Samba later than 3.0.11, connecting to the home
share of a user will use the root of the filesystem
as the home directory if this user is misconfigured to have
an empty home directory in /etc/passwd.
o CVE-2009-2948:
If mount.cifs is installed as a setuid program, a user can pass it a
credential or password path to which he or she does not have access and
then use the --verbose option to view the first line of that file.
o CVE-2009-2906:
Specially crafted SMB requests on authenticated SMB connections can
send smbd into a 100% CPU loop, causing a DoS on the Samba server.
36 lines
1.1 KiB
Text
36 lines
1.1 KiB
Text
$NetBSD: patch-bu,v 1.9 2009/10/04 16:58:38 taca Exp $
|
|
|
|
--- ../docs/manpages/smb.conf.5.orig 2009-09-30 21:28:02.000000000 +0900
|
|
+++ ../docs/manpages/smb.conf.5
|
|
@@ -7084,6 +7084,15 @@ Example:
|
|
\fI\fIpasswd chat\fR\fR\fI = \fR\fI\FC"*Enter NEW password*" %n\en "*Reenter NEW password*" %n\en "*Password changed*"\F[]\fR\fI \fR
|
|
.RE
|
|
|
|
+passwd expand gecos (G)
|
|
+.PP
|
|
+.RS 4
|
|
+This boolean specifies if ampersand characters in the GECOS field of a passwd database entry should be replaced with the capitalized login name for that entry when the information is used by various Samba programs\&. This parameter is off by default\&.
|
|
+.sp
|
|
+Default: \fB\fIpasswd expand gecos\fR = no \fR
|
|
+.TP 3n
|
|
+.sp
|
|
+
|
|
passwd program (G)
|
|
.\" passwd program
|
|
.PP
|
|
@@ -9199,6 +9208,15 @@ Default:
|
|
\fI\fIstat cache\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
|
|
.RE
|
|
|
|
+state directory (G)
|
|
+.PP
|
|
+.RS 4
|
|
+This parameter defines the directory the Samba daemon processes will use for storing state files that must persist across machine reboots.
|
|
+.sp
|
|
+Default:
|
|
+\fB\fIstate directory\fR = /var/db/samba \fR
|
|
+.RE
|
|
+
|
|
store dos attributes (S)
|
|
.\" store dos attributes
|
|
.PP
|