openSUSE Factory Release Notes

Copyright © 2010 Novell, Inc.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included as the file fdl.txt.

This is just the initial version of the release notes for openSUSE Factory. Find previous release notes referenced in the openSUSE wiki at http://en.opensuse.org/Release_Notes#Last_version_of_the_Previous_Release_Notes.

This public beta test is part of the openSUSE project. Information about the project is available at http://opensuse.org.

Find information about known bugs for this beta in the openSUSE wiki at http://en.opensuse.org/Bugs:Most_Annoying_Bugs. Please report all bugs you encounter using this prerelease of openSUSE Factory in the Novell Bugzilla at http://en.opensuse.org/Submitting_Bug_Reports. If you would like to see anything added to the release notes, please file a bug report against the "Release Notes" component.

These release notes cover the following areas:

Installation
  1. N/A
General
  1. openSUSE Documentation
System Upgrade
  1. Samba: smbfs Service Renamed to cifs
Technical
  1. Samba: mount.cifs no longer setuid root

Installation

N/A

General

openSUSE Documentation

System Upgrade

Samba: smbfs Service Renamed to cifs

Since quite some time, smbfs is no longer part of the kernel. The cifs component has replaced it. To avoid confusion with the name of the service, we finally renamed it accordingly.

During the upgrade of a system with an installed samba-client package, the state of the service will be saved, /etc/samba/smbfstab migrated to /etc/samba/cifstab, and the state of the service restored, if required.

Technical

Samba: mount.cifs no longer setuid root

The mount.cifs program that is being used to mount Samba/CIFS shares will not be allowed to be run as a setuid root program. mount.cifs has been the subject of several security bugs that have arisen due to some of the users using it as a setuid root program. For e.g., tools like smb4k on the distribution require mount.cifs setuid root. So there is a chance that users of such tools set the setuid bit. This program has not been properly audited for security and the Samba team strongly recommends that it not be installed as a setuid root program at this time.

To make that very clear, this release forcibly disables the ability for mount.cifs to run as a setuid root program. People are welcome to trivially patch this out, by setting CIFS_DISABLE_SETUID_CHECK to 1, but they do so at their own peril.

A security audit and redesign of this program is in progress by the Samba Team.