summaryrefslogtreecommitdiff
path: root/WHATSNEW.txt
diff options
context:
space:
mode:
authorKarolin Seeger <kseeger@samba.org>2010-02-09 11:36:37 +0100
committerKarolin Seeger <kseeger@samba.org>2010-02-10 11:08:40 +0100
commit4caaf04ac5e56ed38cfa0c3ab39ed2c748fe6333 (patch)
tree46bb5b8ff5be5c521c22daed7a71edc8d0a2887c /WHATSNEW.txt
parent324f6b05c8ca404c45196ec4229f2c0e212df882 (diff)
downloadsamba-4caaf04ac5e56ed38cfa0c3ab39ed2c748fe6333.tar.gz
WHATSNEW: Update changes.
Karolin (cherry picked from commit d7d33a15a66a0afd0b5004294ed3bf2210ce7361)
Diffstat (limited to 'WHATSNEW.txt')
-rw-r--r--WHATSNEW.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 1a30e150e0f..c8739cc4a36 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -14,6 +14,7 @@ General changes:
o Add support for full Windows timestamp resolution
o The Using Samba HTML book has been removed.
o 'net', 'smbclient' and libsmbclient can use credentials cached by Winbind.
+o The default value of "wide links" has been changed to "no".
Protocol changes:
o Experimental implementation of SMB2
@@ -45,6 +46,11 @@ connecting to a Samba server using Nautilus without re-entering username and
password. This feature is enabled by default and can be disabled per application
by setting the LIBSMBCLIENT_NO_CCACHE environment variable.
+The default value of "wide links" has been changed to "no" to avoid an insecure
+default configuration ("wide links = yes" and "unix extensions = yes"). For
+more details, please see http://www.samba.org/samba/news/symlink_attack.html.
+
+
Protocol changes
================
@@ -89,6 +95,7 @@ smb.conf changes
debug hires timestamp Changed Default yes
ldap deref New auto
ldap follow referral New auto
+ wide links Changed Default no
New configure options