Messages in this thread | | | Date | Thu, 11 Mar 2010 17:53:19 -0800 | From | Jeremy Allison <> | Subject | Re: [linux-cifs-client] [RFC PATCH] CIFS posix acl permission checking |
| |
On Thu, Mar 11, 2010 at 11:45:29PM +0100, Michael Adam wrote: > > When discussing this with Volker today, he had a different idea: > One could implement a trans2 impersonate call in samba (as a new > call in the unix extensions) that could be used to transfer the > session established by the privileged user (root, say) to a > different user specified as an argument to the call -- without > the need to give credentials! Then this call could be used in > the multi user mount scenario: when uid 1000 accesse the cifs > mount then the root-dispatcher mount would create a new session > initially as root and issue an impersonate call to user 1000 > directly afterwards. > > Wouldn't that be something worth considering?
This world work, but protocol cleanliness-wise it's *really* horrible :-).
Jeremy.
| |