From 5a573c2285e42777282ace19b9b83f27858a4c55 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Mon, 27 Mar 2017 11:48:25 -0700 Subject: s3: Test for CVE-2017-2619 regression with "follow symlinks = no". BUG: https://bugzilla.samba.org/show_bug.cgi?id=12721 Signed-off-by: Jeremy Allison Reviewed-by: Uri Simchoni Back-ported from commit 782172a9bef0040981d20e49519b13dd744df6a0 --- selftest/target/Samba3.pm | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm index 013e8d5502e..d080a910b50 100755 --- a/selftest/target/Samba3.pm +++ b/selftest/target/Samba3.pm @@ -1245,6 +1245,9 @@ sub provision($$$$$$$$) my $shadow_shrdir="$shadow_basedir/share"; push(@dirs,$shadow_shrdir); + my $nosymlinks_shrdir="$shrdir/nosymlinks"; + push(@dirs,$nosymlinks_shrdir); + # this gets autocreated by winbindd my $wbsockdir="$prefix_abs/winbindd"; my $wbsockprivdir="$lockdir/winbindd_privileged"; @@ -1858,6 +1861,10 @@ sub provision($$$$$$$$) copy = tmp acl_xattr:ignore system acls = yes acl_xattr:default acl style = posix +[nosymlinks] + copy = tmp + path = $nosymlinks_shrdir + follow symlinks = no [acl_xattr_ign_sysacl_windows] copy = tmp acl_xattr:ignore system acls = yes -- cgit v1.2.1