Hi Am noticing smbd processes are running as root and occassionally I see a child process as userid Just curios under what circumstances the smbd runs as user id process ( unix id ) and running as root is a security risk? Thanks in advance -Abdul
-----Original Message----- From: Javid Abdul-AJAVID1 [mailto:abduljavid@motorola.com] Sent: Tuesday, February 18, 2003 11:18 AM To: samba-technical@lists.samba.org Cc: samba@lists.samba.org Subject: Samba processes Hi Am noticing smbd processes are running as root and occassionally I see a child process as userid Just curios under what circumstances the smbd runs as user id process ( unix id ) and running as root is a security risk? Thanks in advance -Abdul
On Tue, 18 Feb 2003, Javid Abdul-AJAVID1 wrote: Abdul, We saw your first posting. Please be patient. Both smbd and nmbd run as root. All user interaction with the file system is done as the user who initiated the process. Please refer to the source code to see what happens. Samba has to ba able to perform a number of tasks that can be done only as root.> > > -----Original Message----- > From: Javid Abdul-AJAVID1 [mailto:abduljavid@motorola.com] > Sent: Tuesday, February 18, 2003 11:18 AM > To: samba-technical@lists.samba.org > Cc: samba@lists.samba.org > Subject: Samba processes > > > > Hi > Am noticing smbd processes are running as root and occassionally I see a > child process as useridYep.> > Just curios under what circumstances the smbd runs as user id process ( unix > id ) and running as root is a security risk?Please explain where the security risks are. We would appreciate your patches. - John T. -- John H Terpstra Email: jht@samba.org
Thanks John Wondering y some smbd client connections show up as userid though parent is root not all client connections are show up as root. Is there a way to know when a client connection from windows side will shoup as root or user id. Thanks again -----Original Message----- From: John H Terpstra [mailto:jht@samba.org] Sent: Tuesday, February 18, 2003 1:49 PM To: Javid Abdul-AJAVID1 Cc: samba-technical@lists.samba.org; samba@lists.samba.org Subject: Re: [Samba] RE: Samba processes On Tue, 18 Feb 2003, Javid Abdul-AJAVID1 wrote: Abdul, We saw your first posting. Please be patient. Both smbd and nmbd run as root. All user interaction with the file system is done as the user who initiated the process. Please refer to the source code to see what happens. Samba has to ba able to perform a number of tasks that can be done only as root.> > > -----Original Message----- > From: Javid Abdul-AJAVID1 [mailto:abduljavid@motorola.com] > Sent: Tuesday, February 18, 2003 11:18 AM > To: samba-technical@lists.samba.org > Cc: samba@lists.samba.org > Subject: Samba processes > > > > Hi > Am noticing smbd processes are running as root and occassionally I see > a child process as useridYep.> > Just curios under what circumstances the smbd runs as user id process > ( unix id ) and running as root is a security risk?Please explain where the security risks are. We would appreciate your patches. - John T. -- John H Terpstra Email: jht@samba.org
DON'T SEND USER QUESTIONS TO SAMBA-TECHNICAL.> Just curios under what circumstances the smbd runs as user id process ( unix > id )Broadly: it runs as a user when doing operations on behalf of that user, and as root when doing system tasks.> and running as root is a security risk?No. If you want to offer smb services then it must run as root. If you don't need the service don't run the daemon. -- Martin