Bug 1775637 - Remove guest access by default for GlusterFS volume SMB shares added by hook scripts
Summary: Remove guest access by default for GlusterFS volume SMB shares added by hook ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: core
Version: rhgs-3.5
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
: RHGS 3.5.z Batch Update 3
Assignee: Anoop C S
QA Contact: Aditya Ramteke
URL:
Whiteboard:
Depends On: 1775612 1781483
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-11-22 13:24 UTC by Anoop C S
Modified: 2020-12-17 04:50 UTC (History)
12 users (show)

Fixed In Version: glusterfs-6.0-38
Doc Type: Enhancement
Doc Text:
With this update, guest access to the newly created GlusterFS volume shares via SMB is not enabled by default.
Clone Of: 1775612
Environment:
Last Closed: 2020-12-17 04:50:17 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2020:5603 0 None None None 2020-12-17 04:50:33 UTC

Internal Links: 1761886

Description Anoop C S 2019-11-22 13:24:57 UTC
+++ This bug was initially created as a clone of Bug #1775612 +++

Description of problem:
SMB share section for GlusterFS volume added by Samba hook scripts with the help of user.smb/user.cifs volume set option currently has the following format:

[gluster-$VOLNAME]
comment = For samba share of volume $VOLNAME
vfs objects = glusterfs
glusterfs:volume = $VOLNAME
glusterfs:logfile = $LOGFILEBASE/glusterfs-$VOLNAME.%M.log
glusterfs:loglevel = 7
path = /
read only = no
guest ok = yes
kernel share modes = no

Allowing guest access with "guest ok = yes" is not a basic requirement and is purely an optional share parameter. Furthermore it could lead SMB client to attempt SMB requests out of a guest session resulting in minor issues from different use cases.

Version-Release number of selected component (if applicable):
master

--- Additional comment from Worker Ant on 2019-11-22 17:41:26 IST ---

REVIEW: https://review.gluster.org/23745 (extras/hooks: Remove smb.conf parameter allowing guest access) posted (#1) for review on master by Anoop C S

Comment 2 Vivek Das 2020-04-06 12:39:57 UTC
ACK for 3.5.2

Comment 15 errata-xmlrpc 2020-12-17 04:50:17 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (glusterfs bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:5603


Note You need to log in before you can comment on or make changes to this bug.