Samba Folder Permissions

m2azer · 01-15-2007, 11:58 AM

I just discovered that from windows workstation client machine with a domain user logged in. i could right click on any share, samba shares, go to the security tab and change all the security. How do I prevent users from changing permissions?

xjlittle · 01-15-2007, 12:03 PM

Change the permissions on them to 770 and make sure that any ACLs that are set on them are 770 as well.

m2azer · 01-15-2007, 01:55 PM

I changed the permission on user directory to 770 here is my home directory content - user mina.azer own the directory and the the directory group is root- when the user mina.azer login he is able to right click on the home directory and view the directory security tab and also able to change the permission.

drwx------ 3 ad01$ Domain Computers 4096 Jan 15 12:35 ad01_
drwx------ 3 administrator Domain Users 4096 Jan 15 12:36 administrator
drwxrwx--- 4 mina.azer root 4096 Jan 15 11:49 mina.azer
drwx------ 3 vdc2$ Domain Controllers 4096 Jan 15 12:36 vdc2_

m2azer · 01-15-2007, 02:17 PM

I have found this link online http://lists.samba.org/archive/samba...st/000281.html which talk about ACL and the fact that this line "nt acl support = no" will hide the security in the files/folders when users right click on the properties. I am not really sure if its good idea to use this setting or not? or doesn't present any security issues?