Date: Mon, 26 Nov 2018 21:09:57 +0300 From: Yuri Pankov <yuripv@yuripv.net> To: Gerard Seibert <gerard@seibercom.net>, freebsd-arch@freebsd.org Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system Message-ID: <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net> In-Reply-To: <20181126121926.00007626@seibercom.net> References: <20181126121926.00007626@seibercom.net>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB Content-Type: multipart/mixed; boundary="IWk54rwCxnW4wHAFkbETbUapDxnamcowq"; protected-headers="v1" From: Yuri Pankov <yuripv@yuripv.net> To: Gerard Seibert <gerard@seibercom.net>, freebsd-arch@freebsd.org Message-ID: <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net> Subject: Re: Removal or updating of "mount_smbfs" from FreeBSD operating system References: <20181126121926.00007626@seibercom.net> In-Reply-To: <20181126121926.00007626@seibercom.net> --IWk54rwCxnW4wHAFkbETbUapDxnamcowq Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Gerard Seibert wrote: > TO WHOM IT MAY CONCERN >=20 > The =E2=80=9CSMBv1=E2=80=9D protocol is a security hazard and was depre= ciated by Microsoft in > 2014. There is virtually no use for it anymore. >=20 > The =E2=80=9Cmount_smbfs=E2=80=9D utility in FreeBSD only uses that pro= tocol, which results > in making it useless with newer versions of Microsoft=E2=80=99s operati= ng systems, as > well as other OS=E2=80=99s that have depreciated the use of SMBv1. >=20 > I would like to suggest that FreeBSD do one of the following: >=20 > 1) Remove =E2=80=9Cmount_smbfs=E2=80=9D from FreeBSD. This would probab= ly be in versions 12.1 > or 13. It is perhaps too late to get into FreeBSD 12. I don't think this is reasonable, more so in a hurry, as this is a client, and doesn't impose any security issues. > 2) Update =E2=80=9Cmount_smbfs=E2=80=9D so that it is compatible with v= ersions SMBv3 and > greater. While "SMBv2" is not dead, it is definitely comatose. This wou= ld be a > better idea if someone had the time to do it. There's an entry in https://wiki.freebsd.org/DevSummit/201810: ---------------------------------------------------------------------- updated mount SMBFS smbv3 support (iXsystems) ---------------------------------------------------------------------- I wonder if we could get a bit more information on this -- is this just a plan, or is it being actively worked on/ready for integration? --IWk54rwCxnW4wHAFkbETbUapDxnamcowq-- --OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE+Gq3PsPeLT4tL/9wk4vgf7Eq4WwFAlv8Nv0ACgkQk4vgf7Eq 4WxvdAf+JFYubI6vGIeZ9LreW7CGlYolKtwZkkIT56854+kaNxTVidx9hDfefeRE fLXwmsrRUdh/V2SW5peESwaAVb48GmyX7eD3Hnq9Y1Pp0XomW7uhrHLHOMRfHWYi 0kwi8qW+G4a541JypK0nW5UpWeMPNkeTNwiDkqznM35GG9s6yLqAtJ3h9YcTXnpK jVYkfeUQ6itdbyaehFheF6UtR3ZxcnHNF0ruAPe1LTvdL+QpSu3Vf9V1B+XARtUj ZMwgMYhQ6Ichh08ZjA2nMSlkr37ug/tFyx9Aq9cGBzEoexvm/qY1njcV3v6k0FFw xYyRLJZpgf5v/36Mv6NQbot8ZHp4cg== =KVCN -----END PGP SIGNATURE----- --OxsAe2UgGdIHRzPHmWIdYxHjJDWmf6UIB--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?70b84814-89a8-fdef-7092-1cb4a46785e1>