LX0-104 · Question #647
Which parameter in smb.conf prohibits users from accessing files outside of the share by following symbolic links?
The correct answer is A. wide links = No. The wide links = no parameter in smb.conf prevents Samba users from traversing symbolic links that point outside the current share's directory.
Question
Options
- Awide links = No
- Bfollow links = No
- Clinks = No
- DNo parameter is needed because smbd runs in a chroot jail.
How the community answered
(22 responses)- A91% (20)
- B5% (1)
- D5% (1)
Why each option
The `wide links = no` parameter in `smb.conf` prevents Samba users from traversing symbolic links that point outside the current share's directory.
The `wide links = no` parameter, when configured in `smb.conf` for a share, restricts users from following symbolic links that lead to locations outside of that particular share's directory tree. This prevents potential security vulnerabilities where users might access unintended areas of the filesystem via maliciously crafted or inadvertently exposed links.
`follow links = no` prevents Samba from following *any* symbolic links, even those within the share, not specifically those pointing outside.
`links` is not a standard `smb.conf` parameter for controlling symbolic link behavior in this context.
`smbd` does not run in a chroot jail by default; it needs specific configuration for chroot, and this parameter is still necessary even with chroot for robust link control.
Concept tested: Samba symbolic link security, wide links parameter
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.