]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
s3: smbd: Remove allowing widelinks in fd_open path.
authorJeremy Allison <jra@samba.org>
Tue, 7 Apr 2020 00:33:17 +0000 (17:33 -0700)
committerRalph Boehme <slow@samba.org>
Thu, 9 Apr 2020 19:40:35 +0000 (19:40 +0000)
Widelinks are now always denied, unless the vfs_widelinks
VFS module is loaded.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
source3/smbd/open.c

index 3731e5df7cb5294ed0fb29358787c67c5e1471f7..acbe50229e933e0b37609a2f45fcf8526dc74194 100644 (file)
@@ -760,7 +760,7 @@ NTSTATUS fd_open(struct connection_struct *conn,
        }
 
        /* Ensure path is below share definition. */
-       if (!lp_widelinks(SNUM(conn))) {
+       {
                struct smb_filename *conn_rootdir_fname = NULL;
                const char *conn_rootdir = SMB_VFS_CONNECTPATH(conn,
                                                smb_fname);
@@ -796,8 +796,6 @@ NTSTATUS fd_open(struct connection_struct *conn,
                if (saved_errno != 0) {
                        errno = saved_errno;
                }
-       } else {
-               fsp->fh->fd = SMB_VFS_OPEN(conn, smb_fname, fsp, flags, mode);
        }
 
        if (fsp->fh->fd == -1) {