Bug 7595 - allow symlinks to paths in another share
Summary: allow symlinks to paths in another share
Status: NEW
Alias: None
Product: Samba 3.4
Classification: Unclassified
Component: File services (show other bugs)
Version: 3.4.8
Hardware: x86 FreeBSD
: P5 enhancement
Target Milestone: ---
Assignee: Volker Lendecke
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-29 09:24 UTC by Marcin Wisnicki
Modified: 2010-08-09 15:33 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcin Wisnicki 2010-07-29 09:24:18 UTC 
Currently with "wide links = no" server denies access to files that are symlinks pointing to files within another share.

According to wide links documentation from smb.conf(5):
"Links that point to areas within the directory tree exported by the server are always allowed"

My reading is that if target file is exported then symlink must work.
Of course that would be slightly insecure (bypassing share level access control) so I guess that paragraph should actually be:

"Links that point to areas within the same share are always allowed".

However, since symlinks to paths in another share are actually useful and security impact is very small and configuration dependent, I would like to request additional option like "wide links = share" that would allow such behavior and still be compatible with "unix extensions = on".