Bug #3305
closedsmbfs mount shows password
0%
Description
OI151a7:
Using 'mount' to show mounted filesets (even as a normal user) shows
the password used for mounting (here in case of samba), whereas
OSol 2009.06 U7 (support line version) just shows ** in place of
the password. This is a security problem and should be fixed quickly.
Files
Updated by Gordon Ross almost 11 years ago
Do you have any information on which release or build first exhibits this problem?
Updated by Udo Grabowski almost 11 years ago
No, I suspect that this was only fixed on the support line of Osol, we just recently saw this when
converting one specific machine to OI-151a7 which had this password-secured smbfs mount.
Updated by Gordon Ross almost 11 years ago
- Status changed from New to In Progress
Here's a simple fix: (see attached)
Updated by Rich Lowe almost 11 years ago
- Project changed from OpenIndiana Distribution to illumos gate
Updated by Gordon Ross almost 11 years ago
- Subject changed from mount shows password to smbfs mount shows password
- Assignee set to Gordon Ross
Updated by Gordon Ross almost 11 years ago
- File il-3305.patch il-3305.patch added
Better fix attached. (one that works:)
Only show the server name and share name in the mounted resource.
That's sufficient, and makes this a normal "UNC" path.
(the name;password stuff was non-standard anyway.)
Updated by Udo Grabowski almost 11 years ago
A quick workaround until this reaches the distributions is to specify the
user/password information persistently with 'smbutil login user@server' .
Updated by Gordon Ross almost 11 years ago
Right. Another work-around is to put the password in $HOME/.nsmbrc
Updated by Gordon Ross over 10 years ago
- Status changed from In Progress to Resolved
commit 15c4b7fc60958757a4ae2244a3910f06c3308202 Author: Gordon Ross <gwr@nexenta.com> Date: Tue Oct 30 23:03:27 2012 -0400 3305 smbfs mount shows password Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Marcel Telka <marcel@telka.sk> Approved by: Richard Lowe <richlowe@richlowe.net> :100644 100644 afc4b3c... d8a5a98... M usr/src/cmd/fs.d/smbclnt/mount/mount.c