From d803d66b3c2365dee174a456ce38c5c2cd2c7cc3 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Mon, 6 Apr 2020 17:33:17 -0700 Subject: [PATCH] s3: smbd: Remove allowing widelinks in fd_open path. Widelinks are now always denied, unless the vfs_widelinks VFS module is loaded. Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme --- source3/smbd/open.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/source3/smbd/open.c b/source3/smbd/open.c index 3731e5df7cb..acbe50229e9 100644 --- a/source3/smbd/open.c +++ b/source3/smbd/open.c @@ -760,7 +760,7 @@ NTSTATUS fd_open(struct connection_struct *conn, } /* Ensure path is below share definition. */ - if (!lp_widelinks(SNUM(conn))) { + { struct smb_filename *conn_rootdir_fname = NULL; const char *conn_rootdir = SMB_VFS_CONNECTPATH(conn, smb_fname); @@ -796,8 +796,6 @@ NTSTATUS fd_open(struct connection_struct *conn, if (saved_errno != 0) { errno = saved_errno; } - } else { - fsp->fh->fd = SMB_VFS_OPEN(conn, smb_fname, fsp, flags, mode); } if (fsp->fh->fd == -1) { -- 2.47.3