nerdexam
CompTIA

LX0-104 · Question #647

Which parameter in smb.conf prohibits users from accessing files outside of the share by following symbolic links?

The correct answer is A. wide links = No. The wide links = no parameter in smb.conf prevents Samba users from traversing symbolic links that point outside the current share's directory.

Security

Question

Which parameter in smb.conf prohibits users from accessing files outside of the share by following symbolic links?

Options

  • Awide links = No
  • Bfollow links = No
  • Clinks = No
  • DNo parameter is needed because smbd runs in a chroot jail.

How the community answered

(22 responses)
  • A
    91% (20)
  • B
    5% (1)
  • D
    5% (1)

Why each option

The `wide links = no` parameter in `smb.conf` prevents Samba users from traversing symbolic links that point outside the current share's directory.

Awide links = NoCorrect

The `wide links = no` parameter, when configured in `smb.conf` for a share, restricts users from following symbolic links that lead to locations outside of that particular share's directory tree. This prevents potential security vulnerabilities where users might access unintended areas of the filesystem via maliciously crafted or inadvertently exposed links.

Bfollow links = No

`follow links = no` prevents Samba from following *any* symbolic links, even those within the share, not specifically those pointing outside.

Clinks = No

`links` is not a standard `smb.conf` parameter for controlling symbolic link behavior in this context.

DNo parameter is needed because smbd runs in a chroot jail.

`smbd` does not run in a chroot jail by default; it needs specific configuration for chroot, and this parameter is still necessary even with chroot for robust link control.

Concept tested: Samba symbolic link security, wide links parameter

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html

Topics

#Samba configuration#security#symbolic links#path traversal

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice