Remove obsolete world writeable /var/spool/samba
related: rhbz#1954531
This commit is contained in:
parent
06c4d9cf0c
commit
05ca7887eb
11
samba.spec
11
samba.spec
@ -118,9 +118,9 @@
|
|||||||
# This should be rc1 or nil
|
# This should be rc1 or nil
|
||||||
%global pre_release %nil
|
%global pre_release %nil
|
||||||
|
|
||||||
%global samba_release %{main_release}%{?dist}
|
%global samba_release %{main_release}
|
||||||
%if "x%{?pre_release}" != "x"
|
%if "x%{?pre_release}" != "x"
|
||||||
%global samba_release 0.%{main_release}.%{pre_release}%{?dist}
|
%global samba_release 0.%{main_release}.%{pre_release}
|
||||||
%endif
|
%endif
|
||||||
|
|
||||||
# This is a network daemon, do a hardened build
|
# This is a network daemon, do a hardened build
|
||||||
@ -145,7 +145,7 @@
|
|||||||
|
|
||||||
Name: samba
|
Name: samba
|
||||||
Version: %{samba_version}
|
Version: %{samba_version}
|
||||||
Release: %{samba_release}
|
Release: %{samba_release}%{?dist}
|
||||||
|
|
||||||
%if 0%{?rhel}
|
%if 0%{?rhel}
|
||||||
Epoch: 0
|
Epoch: 0
|
||||||
@ -1051,7 +1051,6 @@ install -d -m 0755 %{buildroot}/var/lib/samba/scripts
|
|||||||
install -d -m 0755 %{buildroot}/var/lib/samba/sysvol
|
install -d -m 0755 %{buildroot}/var/lib/samba/sysvol
|
||||||
install -d -m 0755 %{buildroot}/var/lib/samba/winbindd_privileged
|
install -d -m 0755 %{buildroot}/var/lib/samba/winbindd_privileged
|
||||||
install -d -m 0755 %{buildroot}/var/log/samba/old
|
install -d -m 0755 %{buildroot}/var/log/samba/old
|
||||||
install -d -m 0755 %{buildroot}/var/spool/samba
|
|
||||||
install -d -m 0755 %{buildroot}/run/samba
|
install -d -m 0755 %{buildroot}/run/samba
|
||||||
install -d -m 0755 %{buildroot}/run/winbindd
|
install -d -m 0755 %{buildroot}/run/winbindd
|
||||||
install -d -m 0755 %{buildroot}/%{_libdir}/samba
|
install -d -m 0755 %{buildroot}/%{_libdir}/samba
|
||||||
@ -1493,7 +1492,6 @@ fi
|
|||||||
|
|
||||||
%{_unitdir}/nmb.service
|
%{_unitdir}/nmb.service
|
||||||
%{_unitdir}/smb.service
|
%{_unitdir}/smb.service
|
||||||
%attr(1777,root,root) %dir /var/spool/samba
|
|
||||||
%dir %{_sysconfdir}/openldap/schema
|
%dir %{_sysconfdir}/openldap/schema
|
||||||
%config %{_sysconfdir}/openldap/schema/samba.schema
|
%config %{_sysconfdir}/openldap/schema/samba.schema
|
||||||
%config(noreplace) %{_sysconfdir}/pam.d/samba
|
%config(noreplace) %{_sysconfdir}/pam.d/samba
|
||||||
@ -3878,6 +3876,9 @@ fi
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Apr 30 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-2
|
||||||
|
- related: rhbz#1954531 - Remove obsolete /var/spool/samba
|
||||||
|
|
||||||
* Thu Apr 29 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-1
|
* Thu Apr 29 2021 Andreas Schneider <asn@redhat.com> - 4.14.4-1
|
||||||
- resolves: rhbz#1954531 - Update to Samba 4.14.4
|
- resolves: rhbz#1954531 - Update to Samba 4.14.4
|
||||||
- resolves: rhbz#1949446 - Fix CVE-2021-20254
|
- resolves: rhbz#1949446 - Fix CVE-2021-20254
|
||||||
|
@ -281,7 +281,7 @@
|
|||||||
|
|
||||||
[printers]
|
[printers]
|
||||||
comment = All Printers
|
comment = All Printers
|
||||||
path = /var/spool/samba
|
path = /var/tmp
|
||||||
browseable = no
|
browseable = no
|
||||||
guest ok = no
|
guest ok = no
|
||||||
writable = no
|
writable = no
|
||||||
|
Loading…
Reference in New Issue
Block a user