smbmnt setuid

slackamp · 10-01-2006, 08:11 PM

hello everyone, well i just wanted to ask if it is a security risk that smbmnt and smnunmount has the setuid enabled. i wanted to be able to mount a samba share as a user without editing fstab and the only way I was able to accomplish this was by making smbmnt and smbunmount setuid.

julot · 10-02-2006, 09:40 AM

I don't know, you sohuld write to the mailing lists and tell us all the answer

On the other hand, why don't you try pam_mount? it mounts smb shares (and several other stuffs) on login time, and I'm almost sure that you can allow your users to define which mounts do they want

davidsrsb · 10-02-2006, 10:58 AM

I don't think that it's too bad.
But then you should not have Samba exposed to the Internet and never suid smbmount

slackamp · 10-03-2006, 08:44 AM

thanks davidsrsb, i did see in a man page that smbmnt is meant to be suid and not sbmmount. it will only be internal to my local network.

julot, i don't think slackware supports PAM and i like it that way also.