Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Linux / Samba: How to force samba to follow symbolic links

Posted on 2012-09-17
1
Medium Priority
?
972 Views
Last Modified: 2012-09-17
Hi experts,

I have a machine with SUSE Linux Enterprise Server 11.2 / x64.

On that machine I have a Samba share, and in a directory under that share are symbolic links to directories not within the share tree.

By default Samba is set not to follow those links for security reasons even if the corresponding user has sufficient rights to these files. It won't even do that if the destination is another share's content where the user has equal rights.

My question:
Which configuration options are needed to get completely rid of that restriction ?

Here are the corresponding parts of my smb.conf:

[global]
	security = user
	follow symlinks = Yes
        (...)

[theshare]
	comment = This is the share
	inherit acls = Yes
	path = /theshare
	read only = No
	valid users = theuser

Open in new window

0
Comment
Question by:frankhelk
1 Comment
 
LVL 14

Accepted Solution

by:
frankhelk earned 0 total points
ID: 38405016
Found out by myself. Sorry for any inconvenience :)

The following is needed:

[global]
        (...)
	allow insecure wide links = yes
	follow symlinks = Yes

[theshare]
	(...)
        wide links = yes

Open in new window


Please keep in mind that this might pose a security risk in the great wide open ....
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

576 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question