Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Jul 1999 03:33:06 +0000 (GMT)
From:      Ryan Thompson <freebsd@sasknow.com>
To:        freebsd-questions@freebsd.org
Subject:   Samba security questions
Message-ID:  <Pine.BSF.4.10.9907280322410.591-100000@sasknow.com>

next in thread | raw e-mail | index | archive | help
Hi everybody

I just threw Samba on to my server machine here in order to allow my
Windows client machine on the LAN to have write access to my web root.

I had no success with user or server access settings in smb.conf, but the
share setting seems to do what I intend.  However, I can't seem to get
FreeBSD to run the connection daemon as any other user but nobody.
Meaning, files in the web root owned by another user (such as root or my
user account) are read-only.  I do NOT think it would be wise to chmod 777
all the files in my Apache server root :-)  Instead, I've done a chown
nobody and left the access permissions alone.

This has allowed me read/write access from my NT machine (which is what I
was after in the first place)... And the NT machine is the only host
allowed any access to Samba whatsoever, (besides localhost).  My LAN
security is not an issue.

My question... Is there any real or implied security risk inherent in
having all www data owned by nobody, as far as Apache is concerned?

If so, there must be a better way to do what I'm after.

Virtually yours,
Ryan Thompson



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9907280322410.591-100000>