The Samba-Bugzilla – Bug 1704
It is possible to change to non-existent directory with a trailing ".."
Last modified: 2005-02-17 10:02:34 UTC
With samba server version 3.0.x it is possible to change working directory to
"bogus.." for example. Anything with two trailing dots triggers this "feature".
Sample output with 3.0.6 client and 3.0.4 server:
[jvtm@cruxie /smbmount] mkdir tempdir
[jvtm@cruxie /smbmount] cd tempdir/
[jvtm@cruxie /smbmount/tempdir] ls -l
[jvtm@cruxie /smbmount/tempdir] cd bogus..
[jvtm@cruxie /smbmount/tempdir/bogus..] ls -l
drwxr-xr-x 1 jvtm users 0 Sep 1 2004 tempdir
[jvtm@cruxie /smbmount/tempdir/bogus..] cd very.../weird../indeed..../,..
[jvtm@cruxie /smbmount/tempdir/bogus../very.../weird../indeed..../,..] pwd
This has been confirmed with several systems, including CRUX, Debian and some
It looks like the error is somewhere in the server side code since I'm not able
to do this with samba 2.x mounts (not sure of the server version).
sorry. We don't support smbfs. You'll have to talk to the
kernel maintainers. Although you moght want to test out the
cifs fs in the 2.6 linux kernel.