Package: samba
The default user used by samba to create files of guest users currently
is "nobody", however the filesystem should never contain anything
belonging to the nobody/nogroup. (see Bug #290623)
Other reasons to rethink the impersonation of nobody, are practical
problems in accessing files created by samba guest users.
May I suggest to introduce a proper samba-guest user and
default to create files of guests on the local filesystem as "samba-guest"
and the (general) "users" group. (with the default umask 002)
As all real users are supposed to be in the users group this should
give users full access to the files locally just as through samba.
While at the same time the files are still inaccessible to potentially
vulnerable (system user) deamon processes.
NB: Bug #678615 ("users" group is empty)
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
