Bug 7595 - allow symlinks to paths in another share
allow symlinks to paths in another share
Status: NEW
Product: Samba 3.4
Classification: Unclassified
Component: File services
3.4.8
x86 FreeBSD
: P5 enhancement
: ---
Assigned To: Volker Lendecke
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-07-29 09:24 UTC by Marcin Wisnicki
Modified: 2010-08-09 15:33 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marcin Wisnicki 2010-07-29 09:24:18 UTC
Currently with "wide links = no" server denies access to files that are symlinks pointing to files within another share.

According to wide links documentation from smb.conf(5):
"Links that point to areas within the directory tree exported by the server are always allowed"

My reading is that if target file is exported then symlink must work.
Of course that would be slightly insecure (bypassing share level access control) so I guess that paragraph should actually be:

"Links that point to areas within the same share are always allowed".

However, since symlinks to paths in another share are actually useful and security impact is very small and configuration dependent, I would like to request additional option like "wide links = share" that would allow such behavior and still be compatible with "unix extensions = on".