[OmniOS-discuss] smb share disappears after changing folder permissions followed by smb/server restart

Дмитрий Глушенок glush at jet.msk.su
Thu Nov 3 17:23:50 UTC 2016


There is a patch: https://www.illumos.org/issues/7529

--
Dmitry Glushenok
Jet Infosystems

> 3 нояб. 2016 г., в 16:23, Дмитрий Глушенок <glush at jet.msk.su> написал(а):
> 
> smbd makes it's own privilege set at start:
> 
> smbd_daemonize_fini(int fd, int exit_status)
> ...
>    priv_basicset(pset);
> 
>    /* list of privileges for smbd */
>    (void) priv_addset(pset, PRIV_NET_MAC_AWARE);
>    (void) priv_addset(pset, PRIV_NET_PRIVADDR);
>    (void) priv_addset(pset, PRIV_PROC_AUDIT);
>    (void) priv_addset(pset, PRIV_SYS_DEVICES);
>    (void) priv_addset(pset, PRIV_SYS_SMB);
>    (void) priv_addset(pset, PRIV_SYS_MOUNT);
> 
>    priv_inverse(pset);
> 
>    /* turn off unneeded privileges */
>    (void) setppriv(PRIV_OFF, PRIV_EFFECTIVE, pset);
> ...
> 
> So, SMF context will not work. For now I've set "ppriv && SIGHUP" in a separate service, which is launched just after smbd.
> 
> --
> Dmitry Glushenok
> Jet Infosystems
> 
>> 3 нояб. 2016 г., в 15:58, Jim Klimov <jimklimov at cos.ru> написал(а):
>> 
>> If that is the case, consider fixing up the method_context privileges in the SMF service for the smb/server.
>> Good luck and thanks for sharing ;)
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omniosce.org/ml-archive/attachments/20161103/22e281ab/attachment.html>


More information about the OmniOS-discuss mailing list