Seite 1 von 1

security issues

Verfasst: 30 Okt 2008, 15:48
von wardenik
hi,

one obvious thing that I have noticed...
files inside the depot on the shares (i.e. opt_pcbin\*\*) should not be writable
they should be denied either by smb.conf directive (easier) or by FS privileges on the opsi host (harder, because everytime you modify the script you would have to change the privileges and besides, reinstallation of the packages will not be possible).

so my advice is to set readonly = yes in smb.conf instead of writeable = yes

Re: security issues

Verfasst: 30 Okt 2008, 16:02
von d.oertel
Hi wardenik,

yes, we agree.

opsi until version 3.3 needed write access to this share.
We did a lot of changes and development to make it possible to use this share read only.
At the moment this should work (we hope) even it is not tested yet.

So if you try it, please tell us your experience.

regards

detlef oertel

Re: security issues

Verfasst: 10 Nov 2008, 16:35
von wardenik
No problems with the install pcbin share being set to readonly.