LFCS · Question #647
Which parameter in smb.conf prohibits users from accessing files outside of the share by following symbolic links?
The correct answer is A. wide links = No. To prevent users from navigating outside a Samba share by following symbolic links, the wide links parameter in smb.conf should be set to No.
Question
Options
- Awide links = No
- Bfollow links = No
- Clinks = No
- DNo parameter is needed because smbd runs in a chroot jail.
How the community answered
(43 responses)- A91% (39)
- B2% (1)
- C5% (2)
- D2% (1)
Why each option
To prevent users from navigating outside a Samba share by following symbolic links, the `wide links` parameter in `smb.conf` should be set to `No`.
Setting `wide links = No` in the `smb.conf` prevents Samba from following symbolic links that point to locations outside the current share definition, effectively confining users to the designated share directory and its subdirectories.
`follow links = No` prevents following symbolic links *within* the share, but it does not prevent following links that point *outside* the share directory, which is what `wide links` addresses.
`links = No` is not a standard Samba parameter for controlling symbolic link behavior in this context.
`smbd` does not inherently run in a chroot jail by default; chrooting requires explicit configuration and is not the mechanism Samba uses to control symbolic link traversal outside shares.
Concept tested: Samba symbolic link security
Source: https://www.samba.org/samba/docs/man/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.