I have a security question. We are considering allowing every user to have Samba access to his/her home directory. Access to every other shared directory requires a fair amount of paperwork, plus certification that the user's PC is up-to-date regarding virus protection (we just got bitten by the Love Bug to the tune of 20,000+ Landmark JPEGs). The question is: Is there a way to control how symbolic links are traversed over a Samba link? I know, it seems silly, but I have been "asked to ask". The problem is that granting access to users' home directories doesn't limit them to their home directory, if they have a symlink to anywhere else.
"Morrison, Bradley A." wrote:> > The question is: Is there a way to control how symbolic > links are traversed over a Samba link? I know, it > seems silly, but I have been "asked to ask". > > The problem is that granting access to users' home > directories doesn't limit them to their home directory, > if they have a symlink to anywhere else.See 'wide links' and 'follow symlinks' in smb.conf. Note that these really just apply to directories and not symlinks to files. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 )