Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Nov 2018 13:58:12 -0500
From:      Kris Moore <kris@ixsystems.com>
To:        freebsd-arch@freebsd.org
Subject:   Re: Removal or updating of "mount_smbfs" from FreeBSD operating system
Message-ID:  <70e66ee6-af44-1c48-8daf-c48215dfcf1e@ixsystems.com>
In-Reply-To: <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net>
References:  <20181126121926.00007626@seibercom.net> <70b84814-89a8-fdef-7092-1cb4a46785e1@yuripv.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 11/26/18 1:09 PM, Yuri Pankov wrote:
> Gerard Seibert wrote:
>> TO WHOM IT MAY CONCERN
>>
>> The “SMBv1” protocol is a security hazard and was depreciated by Microsoft in
>> 2014. There is virtually no use for it anymore.
>>
>> The “mount_smbfs” utility in FreeBSD only uses that protocol, which results
>> in making it useless with newer versions of Microsoft’s operating systems, as
>> well as other OS’s that have depreciated the use of SMBv1.
>>
>> I would like to suggest that FreeBSD do one of the following:
>>
>> 1) Remove “mount_smbfs” from FreeBSD. This would probably be in versions 12.1
>> or 13. It is perhaps too late to get into FreeBSD 12.
> I don't think this is reasonable, more so in a hurry, as this is a
> client, and doesn't impose any security issues.
>
>> 2) Update “mount_smbfs” so that it is compatible with versions SMBv3 and
>> greater. While "SMBv2" is not dead, it is definitely comatose. This would be a
>> better idea if someone had the time to do it.
> There's an entry in https://wiki.freebsd.org/DevSummit/201810:
>
> ----------------------------------------------------------------------
> updated mount SMBFS smbv3 support (iXsystems)
> ----------------------------------------------------------------------
>
> I wonder if we could get a bit more information on this -- is this just
> a plan, or is it being actively worked on/ready for integration?
>

We were discussing it at the time, but as of now it's not actively being
worked on from the iX side.

-- 
Kris Moore
Vice President of Engineering
iXsystems, Inc
Ph: (408) 943-4100
Ph: (408) 943-4101
The Groundbreaking TrueNAS M-Series -
Enterprise Storage & Servers Driven By Open Source




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?70e66ee6-af44-1c48-8daf-c48215dfcf1e>