Jeff Layton a0c31ec1c8 mount.cifs: don't allow it to be run as setuid root program ...

mount.cifs has been the subject of several "security" fire drills due to
distributions installing it as a setuid root program. This program has
not been properly audited for security and the Samba team highly
recommends that it not be installed as a setuid root program at this
time.

To make that abundantly clear, this patch forcibly disables the ability
for mount.cifs to run as a setuid root program. People are welcome to
trivially patch this out, but they do so at their own peril.

A security audit and redesign of this program is in progress and we hope
that we'll be able to remove this in the near future.

Signed-off-by: Jeff Layton <jlayton@redhat.com>

2010-01-26 08:15:41 -05:00

..

cifs_spnego.h

Move mount.cifs/umount.cifs to the top level and remove the outdated copy

2009-06-02 23:24:33 +02:00

cifs.upcall.c

s3-kerberos: only use krb5 headers where required.

2009-11-27 16:36:00 +01:00

mount.cifs.c

mount.cifs: don't allow it to be run as setuid root program

2010-01-26 08:15:41 -05:00

mount.h

Move mount.cifs/umount.cifs to the top level and remove the outdated copy

2009-06-02 23:24:33 +02:00

mtab.c

Move mount.cifs/umount.cifs to the top level and remove the outdated copy

2009-06-02 23:24:33 +02:00

umount.cifs.c

umount.cifs: do not attempt to update /etc/mtab if it is symbolic link

2009-07-27 12:02:35 -04:00