[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-31 Thread Launchpad Bug Tracker
This bug was fixed in the package samba - 2:4.5.8+dfsg-0ubuntu0.17.04.6 --- samba (2:4.5.8+dfsg-0ubuntu0.17.04.6) zesty; urgency=medium * d/p/bug_1702529_EACCESS_with_rootshare.patch: Handle corner case for / shares. (LP: #1702529) -- Dariusz Gadomski Wed, 23 Aug 2017 11:50:

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-31 Thread Launchpad Bug Tracker
This bug was fixed in the package samba - 2:4.3.11+dfsg- 0ubuntu0.14.04.11 --- samba (2:4.3.11+dfsg-0ubuntu0.14.04.11) trusty; urgency=medium * d/p/bug_1702529_EACCESS_with_rootshare.patch: Handle corner case for / shares. (LP: #1702529) -- Dariusz Gadomski Wed, 23 Aug 2017

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-31 Thread Launchpad Bug Tracker
This bug was fixed in the package samba - 2:4.3.11+dfsg- 0ubuntu0.16.04.10 --- samba (2:4.3.11+dfsg-0ubuntu0.16.04.10) xenial; urgency=medium * d/p/bug_1702529_EACCESS_with_rootshare.patch: Handle corner case for / shares. (LP: #1702529) -- Dariusz Gadomski Wed, 23 Aug 2017

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-28 Thread Dariusz Gadomski
I have verified the following version of samba this morning: - Trusty: 4.3.11+dfsg-0ubuntu0.14.04.11 - Xenial: 4.3.11+dfsg-0ubuntu0.16.04.10 - Zesty: 4.5.8+dfsg-0ubuntu0.17.04.6 I run it in a testing environment that was originally used to reproduce this issue. On all 3 the issue is gone. ** Tags

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Eric Desrochers
** Description changed: [Impact]  * In case of accessing directories chdir to it directly instead of its parent directory. This changes how dir symlinks are handled in root shares and leads to avoiding the ACCESS_DENIED ISSUE. [Test Case]  1. Prepare smb server with a share:

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Andreas Hasenack
I don't see a samba failure there, just those ftp errors. I think it showed the samba logs "just because", trying to help. Those gvfs dep8 tests need a careful look. I filed https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1713098 about that -- You received this bug notification because you a

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Dariusz Gadomski
I have just retried the gvfs autopkgtests locally and all tests pass there (log attached). What I run was: autopkgtest -l autopkgtests.log --apt-pocket=proposed -U gvfs_1.28.2-1ubuntu1~16.04.2.dsc -- qemu adt-xenial-amd64-cloud.img It may be something related to the autopkgtest infrastructure.

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Eric Desrochers
Andreas, Right I also notice the same failure : ftp:// anonymous (API with flag) ... FAIL ftp:// anonymous (CLI with option) ... Error mounting location: Location is already mounted ERROR ftp:// authenticated (API) ... FAIL ftp:// authenticated (CLI) ... FAIL So it's just a matter of re-running

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Eric Desrochers
yes, I do have a link (buildlog) : https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac /autopkgtest-xenial/xenial/amd64/g/gvfs/20170825_135452_c32a9@/log.gz -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Andreas Hasenack
Do you have a link for this last failure? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1702529 Title: ACCESS_DENIED with symlinks within a root ("/") share To manage notifications about this bug

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Eric Desrochers
The 2nd run of "gvfs [xenial/ppc64el]" passed but "gvfs [xenial/amd64]" still fails as follow : FAILED (failures=3, errors=1) === command failed, showing Samba log files === --- /var/log/samba/log.nmbd --- [2017/08/25 13:53:56.757205, 0] ../lib/util/become_daemon.c:135(daemon_status) STATUS=dae

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Andreas Hasenack
I've seen the gvfs test failures before in artful. The ones that are failing are related to ftp, not samba, as far as I can tell: ftp:// anonymous (API with flag) ... FAIL ftp:// authenticated (API) ... FAIL ftp:// authenticated (CLI) ... FAIL They passed in a subsequent run triggered via the

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Eric Desrochers
Additionally, Note that Trusty and Zesty report no autopkgtest failure in the pending SRU page. Only Xenial does. - Eric -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1702529 Title: ACCESS_DENIED

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-25 Thread Eric Desrochers
There is some regressions found in samba for Xenial as follow: (see pending sru page[1] for more details (buildlog, etc ...) *Regression in autopkgtest for gvfs (ppc64el): test log This one seems to be related to a timeout, I just restarted the test a few minutes ago, let's see the outcome for t

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-24 Thread Brian Murray
Hello Dave, or anyone else affected, Accepted samba into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg- 0ubuntu0.14.04.11 in a few hours, and then in the -proposed repository. Please help us by testing this new package. S

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-24 Thread Brian Murray
Hello Dave, or anyone else affected, Accepted samba into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg- 0ubuntu0.16.04.10 in a few hours, and then in the -proposed repository. Please help us by testing this new package. S

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-24 Thread Brian Murray
Hello Dave, or anyone else affected, Accepted samba into zesty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/samba/2:4.5.8+dfsg- 0ubuntu0.17.04.6 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Eric Desrochers
Sponsored for Zesty, Xenial and Trusty. ** Tags added: sts-sponsor-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1702529 Title: ACCESS_DENIED with symlinks within a root ("/") share To manag

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
** Description changed: [Impact]  * In case of accessing directories chdir to it directly instead of its parent directory. This changes how dir symlinks are handled in root shares and leads to avoiding the ACCESS_DENIED ISSUE. [Test Case]  1. Prepare smb server with a share:

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
** Changed in: samba (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1702529 Title: ACCESS_DENIED with symlinks within a root ("/") share To manag

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Eric Desrochers
** Also affects: samba (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: samba (Ubuntu Zesty) Importance: Undecided Status: New ** Also affects: samba (Ubuntu Xenial) Importance: Undecided Status: New ** Changed in: samba (Ubuntu Trusty) Importan

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
** Tags added: sts sts-sru-needed ** Description changed: [Impact] - * In case of accessing directories chdir to it directly instead of its +  * In case of accessing directories chdir to it directly instead of its parent directory. This changes how dir symlinks are handled in root share

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
SRU proposal for Trusty. ** Patch added: "trusty_samba_4.3.11+dfsg-0ubuntu0.14.04.11.debdiff" https://bugs.launchpad.net/samba/+bug/1702529/+attachment/4937414/+files/trusty_samba_4.3.11+dfsg-0ubuntu0.14.04.11.debdiff -- You received this bug notification because you are a member of Ubuntu B

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
SRU proposal for Zesty. ** Patch added: "zesty_samba_4.5.8+dfsg-0ubuntu0.17.04.6.debdiff" https://bugs.launchpad.net/samba/+bug/1702529/+attachment/4937416/+files/zesty_samba_4.5.8+dfsg-0ubuntu0.17.04.6.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, wh

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
SRU proposal for Xenial. ** Patch added: "xenial_samba_4.3.11+dfsg-0ubuntu0.16.04.10.debdiff" https://bugs.launchpad.net/samba/+bug/1702529/+attachment/4937415/+files/xenial_samba_4.3.11+dfsg-0ubuntu0.16.04.10.debdiff -- You received this bug notification because you are a member of Ubuntu B

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
** Description changed: + [Impact] + + * In case of accessing directories chdir to it directly instead of its + parent directory. This changes how dir symlinks are handled in root + shares and leads to avoiding the ACCESS_DENIED ISSUE. + + [Test Case] + + 1. Prepare smb server with a share: +

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-23 Thread Dariusz Gadomski
Looks like this has been fixed as a side effect of https://git.samba.org/?p=samba.git;a=commit;h=b886a9443d49f6e27fa3863d87c9e24d12e62874 So I'll abandon my patch and use the one from upstream. Artful is not affected - 4.6.7 has the patch already. Tested it successfully for Trusty, Xenial and Zes

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-08-22 Thread Dariusz Gadomski
** Bug watch added: Samba Bugzilla #12873 https://bugzilla.samba.org/show_bug.cgi?id=12873 ** Also affects: samba via https://bugzilla.samba.org/show_bug.cgi?id=12873 Importance: Unknown Status: Unknown ** Changed in: samba (Ubuntu) Importance: Undecided => Medium ** Changed i

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-07-05 Thread Andreas Hasenack
** Changed in: samba (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1702529 Title: ACCESS_DENIED with symlinks within a root ("/") share To manage notificat

[Bug 1702529] Re: ACCESS_DENIED with symlinks within a root ("/") share

2017-07-05 Thread Dave Kettmann
>From Samba bug: I know this is an unusual scenario: sharing the entire filesytem ("/"). But it was working with 4.3.8, and broke sometime after, perhaps with the CVE-2017-2619 fixes since this involves symlinks and there were a few regressions with that particular CVE. For the test I used 4.6.5