[Bug 380272] Re: /etb/mtab shows cifs mount options usernames and password

Bug Watch Updater 380272 at bugs.launchpad.net
Sat Nov 2 14:34:47 UTC 2013


** Changed in: util-linux (Debian)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/380272

Title:
  /etb/mtab shows cifs mount options usernames and password

Status in “samba” package in Ubuntu:
  Invalid
Status in “util-linux” package in Ubuntu:
  Won't Fix
Status in “util-linux” package in Debian:
  Fix Released

Bug description:
  Binary package hint: mount

  When mounting CIFS share you can read all mount options from
  /etc/mtab. This is major security risk if you are using shared network
  resources. Here is example of mine cifs mount information:

  //192.168.1.10/Te****t /home/<username>/Mount/Te****t cifs
  rw,username=<username>,password=<password>,iocharset=utf8,file_mode=0777,dir_mode=0777,uid=1000
  0 0

  I found this on Ubuntu 8.10 server and 9.10 desktop edition.

  Could this one fix it : 
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=298725

  - Terrrorr

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/380272/+subscriptions



More information about the foundations-bugs mailing list