LinuxMCE Forums

General => Users => Topic started by: brononius on February 17, 2012, 10:51:46 am

Title: [Solved] Shares (backdoor access?)
Post by: brononius on February 17, 2012, 10:51:46 am
Hey,

I've got some users configured in linuxmce.
When somebody access now the server from a windows 7 client, he sees following in the network neighbour:



When he's user1, he has access to User1 and Public, but not to User2. Nice, like it should be.
But he can open Home, and open in there User2. So not nice...

Any idea what i'm doing wrong?


Thanks!
Title: Re: Shares (backdoor access?)
Post by: DragonK on February 17, 2012, 11:52:21 am
As far as I know, User1 will have read rights on User2's folder. But wont be able to delete or write to it???

I might be wrong.....
Title: Re: Shares (backdoor access?)
Post by: brononius on February 17, 2012, 12:45:36 pm
Won't it be more logical if user folders are for users, and public folders for everyone?  :P
Title: Re: Shares (backdoor access?)
Post by: DragonK on February 17, 2012, 02:02:09 pm
Yes it would be...... I will check mine when I get home...
Title: Re: Shares (backdoor access?)
Post by: merkur2k on February 17, 2012, 07:57:47 pm
it looks like it is because we are forcing the user to "root" for the /home share. i am not sure that we should be doing this, we will need to discuss.
Title: Re: Shares (backdoor access?)
Post by: brononius on February 19, 2012, 07:56:40 am
For the moment, i've solved this by changing /etc/samba/smb.conf from:

Code: [Select]
[home]
        browsable = yes
to
Code: [Select]
[home]
        browsable = no
And a quick reload of the samba server (sudo /etc/init.d/samba restart) solved my problem.
I just hope that nothing else will encounter issues now...



Title: Re: Shares (backdoor access?)
Post by: Marie.O on February 19, 2012, 09:22:52 am
If you want to keep the setting (i.e. the invisiblity), change /usr/pluto/templates/smb* as well.
Title: Re: Shares (backdoor access?)
Post by: brononius on February 20, 2012, 08:20:36 am
Thanks, has been updated as well...