Your message dated Mon, 24 Apr 2017 19:32:57 +0000
with message-id <e1d2jjf-000ent...@fasolo.debian.org>
and subject line Bug#858564: fixed in samba 2:4.2.14+dfsg-0+deb8u5
has caused the Debian Bug report #858564,
regarding Cannot access anything under a subdirectory if symlinks are disallowed
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
858564: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858564
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: samba
Version: 2:4.2.14+dfsg-0+deb8u2
Severity: grave
Justification: renders package unusable
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
I upgraded to 8u4 through unattended upgrades.
* What exactly did you do (or not do) that was effective (or
ineffective)?
(1) I attempt to create a file not in the root directory of the share.
(2) I try to write to files not in the root directory of the share.
* What was the outcome of this action?
(1) Windows Explorer freezes entirely until I end task it.
(2) It says permission denied.
* What outcome did you expect instead?
(1) Normally I can create files.
(2) Normally I can access files.
I have reverted back to 8u2 and am no longer experiencing problems.
Access to the root directory of the share works fine.
My smb.conf is as follows:
(start)
[global]
server string = Server
workgroup = WORKGROUP
log level = 1
interfaces = eth0 eth0:0 eth0:1 eth0:2 eth0:3
bind interfaces only = yes
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=65536 SO_RCVBUF=65536
server role = standalone server
disable netbios = yes
disable spoolss = yes
csc policy = disable
oplocks = no
server min protocol = NT1
passdb backend = tdbsam
encrypt passwords = yes
invalid users = root fsadmin
disable netbios = yes
disable spoolss = yes
csc policy = disable
oplocks = no
server min protocol = NT1
passdb backend = tdbsam
encrypt passwords = yes
invalid users = root fsadmin
follow symlinks = no
hide dot files = no
wide links = no
create mask = 660
directory mask = 770
vfs objects = acl_xattr streams_xattr full_audit
full_audit:prefix = %S|%u|%I
follow symlinks = no
hide dot files = no
wide links = no
create mask = 660
directory mask = 770
vfs objects = acl_xattr streams_xattr full_audit
full_audit:prefix = %S|%u|%I
full_audit:success = mkdir open opendir rename rmdir unlink
full_audit:failure = all !getxattr !removexattr !is_offline !readdir_att$
full_audit:facility = LOCAL7
full_audit:priority = ALERT
map acl inherit = yes
store dos attributes = yes
browseable = no
writeable = yes
include = /etc/samba/smb.conf.%i
(end)
As an example of the IP-address specific file, here's one:
(start)
[hr$]
comment = HR Server
path = /mnt/data/hr
force group = +AccessHR
valid users = @AccessHR
(end)
Permissions are absolutely fine. They are essentially 770.
AppArmor is enabled, but I disabled it and the problem still exists in 8u4.
It does not exist in 8u2.
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 8.7
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages samba depends on:
ii adduser 3.113+nmu3
ii dpkg 1.17.27
ii libbsd0 0.7.0-2
ii libc6 2.19-18+deb8u7
ii libhdb9-heimdal [heimdal-hdb-api-8] 1.6~rc2+dfsg-9
ii libldb1 2:1.1.20-0+deb8u1
ii libpam-modules 1.1.8-3.1+deb8u2
ii libpam-runtime 1.1.8-3.1+deb8u2
ii libpopt0 1.16-10
ii libpython2.7 2.7.9-2+deb8u1
ii libtalloc2 2.1.2-0+deb8u1
ii libtdb1 1.3.6-0+deb8u1
ii libtevent0 0.9.28-0+deb8u1
ii lsb-base 4.1+Debian13+nmu1
ii multiarch-support 2.19-18+deb8u7
ii procps 2:3.3.9-9
ii python 2.7.9-1
ii python-dnspython 1.12.0-1
ii python-ntdb 1.0-5
ii python-samba 2:4.2.14+dfsg-0+deb8u2
pn python2.7:any <none>
ii samba-common 2:4.2.14+dfsg-0+deb8u2
ii samba-common-bin 2:4.2.14+dfsg-0+deb8u2
ii samba-dsdb-modules 2:4.2.14+dfsg-0+deb8u2
ii samba-libs 2:4.2.14+dfsg-0+deb8u2
ii tdb-tools 1.3.6-0+deb8u1
ii update-inetd 4.43
Versions of packages samba recommends:
ii attr 1:2.4.47-2
ii logrotate 3.8.7-1+b1
ii samba-vfs-modules 2:4.2.14+dfsg-0+deb8u2
Versions of packages samba suggests:
pn bind9 <none>
pn bind9utils <none>
pn ctdb <none>
pn ldb-tools <none>
pn ntp <none>
pn smbldap-tools <none>
pn winbind <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: samba
Source-Version: 2:4.2.14+dfsg-0+deb8u5
We believe that the bug you reported is fixed in the latest version of
samba, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 858...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mathieu Parent <sath...@debian.org> (supplier of updated samba package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 01 Apr 2017 11:10:22 +0200
Source: samba
Binary: samba samba-libs samba-common samba-common-bin smbclient
samba-testsuite registry-tools libparse-pidl-perl samba-dev samba-doc
python-samba samba-dsdb-modules samba-vfs-modules libpam-smbpass libsmbclient
libsmbclient-dev winbind libpam-winbind libnss-winbind samba-dbg libwbclient0
libwbclient-dev ctdb
Architecture: source amd64 all
Version: 2:4.2.14+dfsg-0+deb8u5
Distribution: jessie-security
Urgency: high
Maintainer: Debian Samba Maintainers <pkg-samba-ma...@lists.alioth.debian.org>
Changed-By: Mathieu Parent <sath...@debian.org>
Description:
ctdb - clustered database to store temporary data
libnss-winbind - Samba nameservice integration plugins
libpam-smbpass - pluggable authentication module for Samba
libpam-winbind - Windows domain authentication integration plugin
libparse-pidl-perl - IDL compiler written in Perl
libsmbclient - shared library for communication with SMB/CIFS servers
libsmbclient-dev - development files for libsmbclient
libwbclient-dev - Samba winbind client library - development files
libwbclient0 - Samba winbind client library
python-samba - Python bindings for Samba
registry-tools - tools for viewing and manipulating the Windows registry
samba - SMB/CIFS file, print, and login server for Unix
samba-common - common files used by both the Samba server and client
samba-common-bin - Samba common files used by both the server and the client
samba-dbg - Samba debugging symbols
samba-dev - tools for extending Samba
samba-doc - Samba documentation
samba-dsdb-modules - Samba Directory Services Database
samba-libs - Samba core libraries
samba-testsuite - test suite from Samba
samba-vfs-modules - Samba Virtual FileSystem plugins
smbclient - command-line SMB/CIFS clients for Unix
winbind - service to resolve user and group information from Windows NT ser
Closes: 858564 858590 858648 859101
Changes:
samba (2:4.2.14+dfsg-0+deb8u5) jessie-security; urgency=high
.
* This is a security release in order to fix regressions from CVE-2017-2619
* Fix "follow symlink = no" (Closes: #858564)
- s3: smbd: Fix incorrect logic exposed by fix for the security bug 12496
(CVE-2017-2619).
- s3: smbd: Fix "follow symlink = no" regression part 2.
- s3: smbd: Fix "follow symlink = no" regression part 2.
* Fix shadow_copy2 (Closes: #858648, #858590)
- vfs_shadow_copy: handle non-existant files and wildcards
- vfs_shadow_copy2: fix crash in 4.2.x backport
- vfs_shadow_copy2: add a blackbox test suite
- s3: libsmb: Correctly align create contexts in a create call.
- s3: libsmb: Add return args to clistr_is_previous_version_path().
- s3: libsmb: Add cli_smb2_shadow_copy_data() function that gets shadow
copy
info over SMB2.
- s3: libsmb: Plumb new SMB2 shadow copy call into cli_shadow_copy_data().
- s3: libsmb: Add the capability to find a @GMT- path in an SMB2 create and
transform to a timewarp token.
- s2-selftest: run shadow_copy2 test both in NT1 and SMB3 modes
- selftest: add content to files created during shadow_copy2 test
- selftest: check file readability in shadow_copy2 test
- selftest: test listing directories inside snapshots
* Fix `net ads join` freeze when run a second time (Closes: #859101) since
4.2
- libads: Fix deadlock when re-joining a domain and updating keytab
Checksums-Sha1:
84e7a651db38a2ec849d67c076236f532de9eeae 4188 samba_4.2.14+dfsg-0+deb8u5.dsc
7b34f18cb5f75b2b135a66019a8a6ffc1a841427 260788
samba_4.2.14+dfsg-0+deb8u5.debian.tar.xz
521df5da091099a6ddf0f995e5dbf0ccbd57ebdd 1031188
samba_4.2.14+dfsg-0+deb8u5_amd64.deb
c8e453cb27a14c64274b68b4ab3026ddecf45c5e 5114906
samba-libs_4.2.14+dfsg-0+deb8u5_amd64.deb
e478680751ce7d7386e01689588cc69dca8ce458 270220
samba-common_4.2.14+dfsg-0+deb8u5_all.deb
35623f8078ca48d34ac3db0e30194bc343b39c5b 615486
samba-common-bin_4.2.14+dfsg-0+deb8u5_amd64.deb
70157a9e30edd1b744c85336cadca7352f5221b5 344012
smbclient_4.2.14+dfsg-0+deb8u5_amd64.deb
525db82f5f72ab4e444238a1fa41e7cd6c203d5c 1571950
samba-testsuite_4.2.14+dfsg-0+deb8u5_amd64.deb
d99218873d5a59bd1a1eaa131c22618a812dbcad 123816
registry-tools_4.2.14+dfsg-0+deb8u5_amd64.deb
eaf8cd500bd601075ebc88f52b2685b98a226517 185040
libparse-pidl-perl_4.2.14+dfsg-0+deb8u5_amd64.deb
e00333e07934c34bcb0d32d179c03ccd70fba868 336160
samba-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
ed3e63ca799e31550a3f84c19b2d0de3911772c8 321288
samba-doc_4.2.14+dfsg-0+deb8u5_all.deb
088373cd58efc982c20b89da7ac4e55aaafbf4aa 1018330
python-samba_4.2.14+dfsg-0+deb8u5_amd64.deb
092bcf70ff225b0ead151bb43e6cc01e50bb6219 308204
samba-dsdb-modules_4.2.14+dfsg-0+deb8u5_amd64.deb
38e43d603ea03328aae20867a2eef28d0ca7330e 330368
samba-vfs-modules_4.2.14+dfsg-0+deb8u5_amd64.deb
1baf00ba16b4339d3764bcdfeada91c3befee327 111830
libpam-smbpass_4.2.14+dfsg-0+deb8u5_amd64.deb
41bfec6528859ed772a7b5203314da16c843501c 147064
libsmbclient_4.2.14+dfsg-0+deb8u5_amd64.deb
b29cc44232c7b13c63fb9174bd1a5a60af193041 134806
libsmbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
6c845dee479adeb7e67e14c40ada5e0ab71f1e37 495568
winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
0d6fdd47f0a61936d6a4728255c47dd248cd7de9 122936
libpam-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
c23225055dac2ab0123bab842e197fff734b405f 107482
libnss-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
f7ee868f4263820bcabbe7ba7054d776a079bd14 29554116
samba-dbg_4.2.14+dfsg-0+deb8u5_amd64.deb
fd638b1679e324c51abbe469566838c0097db999 122110
libwbclient0_4.2.14+dfsg-0+deb8u5_amd64.deb
a22e42d36170564a8eb30d2663f22d0b40eac606 107276
libwbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
e977d47e9e55f598ff234199acd9b566ffe86e14 512570
ctdb_4.2.14+dfsg-0+deb8u5_amd64.deb
Checksums-Sha256:
cb752ec311f56b3027d87896d6fe039379e2c6ec7c157bfde8c9bcdfacc31f98 4188
samba_4.2.14+dfsg-0+deb8u5.dsc
20189eae2f81abb8869dcec6cf2b9afe254e1f52bebe645fa0fad1e9801e812a 260788
samba_4.2.14+dfsg-0+deb8u5.debian.tar.xz
35b1e53d732792fa4f2799b6e99b9542af6569afdfd61faf6a720c020ae43676 1031188
samba_4.2.14+dfsg-0+deb8u5_amd64.deb
bbf51f341c08925de1c0eb4c0f40118ab5a5ae452426c01ef0ccb5f77827b612 5114906
samba-libs_4.2.14+dfsg-0+deb8u5_amd64.deb
01faf8c36ae622481bce7b4d1a36d08babd8268247f27816fd950148004fe8a0 270220
samba-common_4.2.14+dfsg-0+deb8u5_all.deb
a6077ddfee70d94c2d989365d597f8b7d0f0c5347cb65fedc9bf9ac90d90f040 615486
samba-common-bin_4.2.14+dfsg-0+deb8u5_amd64.deb
03038e6cd2617aa5df74eb7f63b3682261f86ad52e02dd3a868c0cef6455c37f 344012
smbclient_4.2.14+dfsg-0+deb8u5_amd64.deb
3e918ac8a432f5e07c42cdfe1286e5722fde706a50240a1745c281ff635ff44b 1571950
samba-testsuite_4.2.14+dfsg-0+deb8u5_amd64.deb
a4b57cf24b7920ee5ce7aab0808b9f79f33f22803361f6718046a599b06f4782 123816
registry-tools_4.2.14+dfsg-0+deb8u5_amd64.deb
62d7ca63dd84fd2ebd98d43781ea4f67900e9d4717ab0f93e0c4e0aef9547f10 185040
libparse-pidl-perl_4.2.14+dfsg-0+deb8u5_amd64.deb
0abb81714af72d83c393cf1bb0d808eb4949f82de4f3088d5eaedf14076aacac 336160
samba-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
70b4307eeb667a935b8729e79b7823c77d79993eb3463d323c84e0eac6a477a9 321288
samba-doc_4.2.14+dfsg-0+deb8u5_all.deb
269f3934d5d656aad7c341f7bf26b945019501295d77afce1131ffe0fb578295 1018330
python-samba_4.2.14+dfsg-0+deb8u5_amd64.deb
60c9d63fb2932e9f1955cf4355c85f696e36d9f40ed2ff9dfd965e3abb061f7a 308204
samba-dsdb-modules_4.2.14+dfsg-0+deb8u5_amd64.deb
44f89ac7f2c4c5e002185287cb5da5fcc569292d02c15b58a332b2d818dcf081 330368
samba-vfs-modules_4.2.14+dfsg-0+deb8u5_amd64.deb
5557cac2c77a9e1207e9c878cc44ab4ddd36c3b0c9c3c575eb54236abca2d0ad 111830
libpam-smbpass_4.2.14+dfsg-0+deb8u5_amd64.deb
52ed9ca178b3b6257892a388d0f5df00aa4aa3440b7ff6432ee449b8a91fbcee 147064
libsmbclient_4.2.14+dfsg-0+deb8u5_amd64.deb
c8d3eaf3957a08a7a20c1228122768716f69ffa1c2da2a7dd6a1ada1398d5317 134806
libsmbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
e1c0358253179c803c310feb29cbf12599b6607d9a8539d8054ee6b7dba480e1 495568
winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
bb5b31b1a5deb5627a5ef7ef9d62466a61e67227f643d31a2181148d07523e5b 122936
libpam-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
c5b8e9a88df59ccbc9d52ecb252276cc2307df3efdd4dba1c012862246e70283 107482
libnss-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
6cf46099fc54ba6132f3ce78aae253d1535bd674ef46a40dcb9487477594a682 29554116
samba-dbg_4.2.14+dfsg-0+deb8u5_amd64.deb
c75c0c47a588318e670666a4a7717cff3091e4b86c4526676fc3d8e11f347877 122110
libwbclient0_4.2.14+dfsg-0+deb8u5_amd64.deb
cca086964e87522845c8558f0497a9f7dec0172bffce142228a0c1deb25ec1c1 107276
libwbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
bc3935a60e40388c141e3dddabd37ef5a19105edc2b733630a888ad5ca38ac45 512570
ctdb_4.2.14+dfsg-0+deb8u5_amd64.deb
Files:
8f9239ed9044483cc3c89d64de0c35c0 4188 net optional
samba_4.2.14+dfsg-0+deb8u5.dsc
e9ceb0e7892a5dc783b7b62bfadb5aee 260788 net optional
samba_4.2.14+dfsg-0+deb8u5.debian.tar.xz
e2be048049f5f29106ae424b6405234d 1031188 net optional
samba_4.2.14+dfsg-0+deb8u5_amd64.deb
04c06cb77af904355996c6facddd6673 5114906 libs optional
samba-libs_4.2.14+dfsg-0+deb8u5_amd64.deb
b4f372203ac54230f48da6443198c4bb 270220 net optional
samba-common_4.2.14+dfsg-0+deb8u5_all.deb
2e031e5c76dfc50dd71a3661d4252581 615486 net optional
samba-common-bin_4.2.14+dfsg-0+deb8u5_amd64.deb
9b6697b28dbeede9e668fb0b0c2400ab 344012 net optional
smbclient_4.2.14+dfsg-0+deb8u5_amd64.deb
a61ff7273136ac8f93209c2e190bf506 1571950 net optional
samba-testsuite_4.2.14+dfsg-0+deb8u5_amd64.deb
d1e93f9f6fdfc6c4d0151884d2297c46 123816 net optional
registry-tools_4.2.14+dfsg-0+deb8u5_amd64.deb
2d035213bf7170938687e6c3a1cdd1d3 185040 perl optional
libparse-pidl-perl_4.2.14+dfsg-0+deb8u5_amd64.deb
d944f5096d6268da6e442182ef5c4eb9 336160 devel optional
samba-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
0a7be07428709c2b7b75a87fd2399878 321288 doc optional
samba-doc_4.2.14+dfsg-0+deb8u5_all.deb
da6e573ae3026c21b7569c3785ae7f3a 1018330 python optional
python-samba_4.2.14+dfsg-0+deb8u5_amd64.deb
869fea2bbf2d9c0cbec3ff414450b7d9 308204 libs optional
samba-dsdb-modules_4.2.14+dfsg-0+deb8u5_amd64.deb
84a95b64b7d556dcd20948431c90b235 330368 net optional
samba-vfs-modules_4.2.14+dfsg-0+deb8u5_amd64.deb
e0e53ba35cdeffd6e639028861f2fd2c 111830 admin extra
libpam-smbpass_4.2.14+dfsg-0+deb8u5_amd64.deb
2f746fad872858531d98f9eb35746e78 147064 libs optional
libsmbclient_4.2.14+dfsg-0+deb8u5_amd64.deb
53cedb6899b479d4b7bbacf23fa9570f 134806 libdevel extra
libsmbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
7c371caae0993bf0ce40d33547526035 495568 net optional
winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
561f24f69135b3fc42576888a7459334 122936 net optional
libpam-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
dcb1209b61d1dfe78c1827ecb56b978b 107482 net optional
libnss-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb
10cf5b216e1243ba81f88179c451f1ae 29554116 debug extra
samba-dbg_4.2.14+dfsg-0+deb8u5_amd64.deb
00da9e8be4fd44a799b06cdca9fd9ec7 122110 libs optional
libwbclient0_4.2.14+dfsg-0+deb8u5_amd64.deb
73d8b1419b29726718c629b6690f5d2f 107276 libdevel optional
libwbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb
a3dce7366fe23bf80b98c64cba929e6d 512570 net optional
ctdb_4.2.14+dfsg-0+deb8u5_amd64.deb
-----BEGIN PGP SIGNATURE-----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=85TD
-----END PGP SIGNATURE-----
--- End Message ---
