Why is mount.cifs not installed suid by default?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}
I am using Gentoo, and on my machine at least mount.cifs is not installed suid root by default. In particular, this means that I can't use the user mount option with CIFS shares. I noticed that mount.nfs has suid set. Is there some reason in particular that this is done for CIFS/samba, or is it just Gentoo being overly cautious?
If it matters, I am using net-fs/samba and not net-fs/mount-cifs.
More Information: It seems that historically it was very insecure, however as far back as 2010 the Samba team themselves were happy to reallow suid root access, so is this still an issue? I've tried adding suid to mount.cifs, and it works but I want to get some more information about this if someone is in the know.
security gentoo samba setuid
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
add a comment |
I am using Gentoo, and on my machine at least mount.cifs is not installed suid root by default. In particular, this means that I can't use the user mount option with CIFS shares. I noticed that mount.nfs has suid set. Is there some reason in particular that this is done for CIFS/samba, or is it just Gentoo being overly cautious?
If it matters, I am using net-fs/samba and not net-fs/mount-cifs.
More Information: It seems that historically it was very insecure, however as far back as 2010 the Samba team themselves were happy to reallow suid root access, so is this still an issue? I've tried adding suid to mount.cifs, and it works but I want to get some more information about this if someone is in the know.
security gentoo samba setuid
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
add a comment |
I am using Gentoo, and on my machine at least mount.cifs is not installed suid root by default. In particular, this means that I can't use the user mount option with CIFS shares. I noticed that mount.nfs has suid set. Is there some reason in particular that this is done for CIFS/samba, or is it just Gentoo being overly cautious?
If it matters, I am using net-fs/samba and not net-fs/mount-cifs.
More Information: It seems that historically it was very insecure, however as far back as 2010 the Samba team themselves were happy to reallow suid root access, so is this still an issue? I've tried adding suid to mount.cifs, and it works but I want to get some more information about this if someone is in the know.
security gentoo samba setuid
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
I am using Gentoo, and on my machine at least mount.cifs is not installed suid root by default. In particular, this means that I can't use the user mount option with CIFS shares. I noticed that mount.nfs has suid set. Is there some reason in particular that this is done for CIFS/samba, or is it just Gentoo being overly cautious?
If it matters, I am using net-fs/samba and not net-fs/mount-cifs.
More Information: It seems that historically it was very insecure, however as far back as 2010 the Samba team themselves were happy to reallow suid root access, so is this still an issue? I've tried adding suid to mount.cifs, and it works but I want to get some more information about this if someone is in the know.
security gentoo samba setuid
security gentoo samba setuid
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
edited Jun 16 '12 at 23:19
Gilles
546k12911101624
546k12911101624
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
asked Jun 16 '12 at 3:59
Matthew ScharleyMatthew Scharley
3691416
3691416
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
As it looks for Gentoo's wiki, they seem to be worried about its security:
http://en.gentoo-wiki.com/wiki/Samba#Non-Privileged_Mounting
They show you how to do it manually but also warn you about security risks.
Above that section, at first lines of page they also note the following:
Note: net-fs/mount-cifs, the old mount helper, is no longer needed, as
the current stable version of net-fs/samba includes all of its
functionality.
So you seem to have both choices but they recommend using samba, it has an USE flag 'client' so you don't have to install everything. (It's been quite long time without using Gentoo)
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
add a comment |
I don't know the reasons for Gentoo but in Debian mount.cifs has the suid bit set and it is supported by upstream nowadays. To get the rationale and understand the reasons you should create a bug report at the Gentoo bug tracker - I would contain a link to the commit which enabled suid support again.
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f40916%2fwhy-is-mount-cifs-not-installed-suid-by-default%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
As it looks for Gentoo's wiki, they seem to be worried about its security:
http://en.gentoo-wiki.com/wiki/Samba#Non-Privileged_Mounting
They show you how to do it manually but also warn you about security risks.
Above that section, at first lines of page they also note the following:
Note: net-fs/mount-cifs, the old mount helper, is no longer needed, as
the current stable version of net-fs/samba includes all of its
functionality.
So you seem to have both choices but they recommend using samba, it has an USE flag 'client' so you don't have to install everything. (It's been quite long time without using Gentoo)
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
add a comment |
As it looks for Gentoo's wiki, they seem to be worried about its security:
http://en.gentoo-wiki.com/wiki/Samba#Non-Privileged_Mounting
They show you how to do it manually but also warn you about security risks.
Above that section, at first lines of page they also note the following:
Note: net-fs/mount-cifs, the old mount helper, is no longer needed, as
the current stable version of net-fs/samba includes all of its
functionality.
So you seem to have both choices but they recommend using samba, it has an USE flag 'client' so you don't have to install everything. (It's been quite long time without using Gentoo)
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
add a comment |
As it looks for Gentoo's wiki, they seem to be worried about its security:
http://en.gentoo-wiki.com/wiki/Samba#Non-Privileged_Mounting
They show you how to do it manually but also warn you about security risks.
Above that section, at first lines of page they also note the following:
Note: net-fs/mount-cifs, the old mount helper, is no longer needed, as
the current stable version of net-fs/samba includes all of its
functionality.
So you seem to have both choices but they recommend using samba, it has an USE flag 'client' so you don't have to install everything. (It's been quite long time without using Gentoo)
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
As it looks for Gentoo's wiki, they seem to be worried about its security:
http://en.gentoo-wiki.com/wiki/Samba#Non-Privileged_Mounting
They show you how to do it manually but also warn you about security risks.
Above that section, at first lines of page they also note the following:
Note: net-fs/mount-cifs, the old mount helper, is no longer needed, as
the current stable version of net-fs/samba includes all of its
functionality.
So you seem to have both choices but they recommend using samba, it has an USE flag 'client' so you don't have to install everything. (It's been quite long time without using Gentoo)
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
edited 1 hour ago
Rui F Ribeiro
41.9k1483142
41.9k1483142
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
answered Aug 7 '12 at 1:20
tripledestripledes
1,03779
1,03779
add a comment |
add a comment |
I don't know the reasons for Gentoo but in Debian mount.cifs has the suid bit set and it is supported by upstream nowadays. To get the rationale and understand the reasons you should create a bug report at the Gentoo bug tracker - I would contain a link to the commit which enabled suid support again.
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
add a comment |
I don't know the reasons for Gentoo but in Debian mount.cifs has the suid bit set and it is supported by upstream nowadays. To get the rationale and understand the reasons you should create a bug report at the Gentoo bug tracker - I would contain a link to the commit which enabled suid support again.
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
add a comment |
I don't know the reasons for Gentoo but in Debian mount.cifs has the suid bit set and it is supported by upstream nowadays. To get the rationale and understand the reasons you should create a bug report at the Gentoo bug tracker - I would contain a link to the commit which enabled suid support again.
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
I don't know the reasons for Gentoo but in Debian mount.cifs has the suid bit set and it is supported by upstream nowadays. To get the rationale and understand the reasons you should create a bug report at the Gentoo bug tracker - I would contain a link to the commit which enabled suid support again.
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
answered Aug 6 '12 at 5:47
Ulrich DangelUlrich Dangel
20.8k25971
20.8k25971
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f40916%2fwhy-is-mount-cifs-not-installed-suid-by-default%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
