← previous next →
Pages: [1]

Author Topic: Cacko Security Hole  (Read 6694 times)

gazik21

  • Newbie
  • *
  • Posts: 8
    • View Profile
Cacko Security Hole
« on: November 13, 2008, 12:39:38 am »
I have my Zaurus running Cacko 1.23 with my Mac Book connected to the same Wi-Fi network.
On my Mac Book in Shared I see Zaurus as a PC Server and I can browse and change  the content of the SD card and HDD on it freely without any password.
I knew about this hole before, just didnt know it is so easy to see it on Mac.

Does anybody know how to close this hole?
Logged

tux

  • Sr. Member
  • ****
  • Posts: 438
    • View Profile
    • http://
Cacko Security Hole
« Reply #1 on: November 13, 2008, 03:36:07 am »
Quote from: gazik21
I have my Zaurus running Cacko 1.23 with my Mac Book connected to the same Wi-Fi network.
On my Mac Book in Shared I see Zaurus as a PC Server and I can browse and change  the content of the SD card and HDD on it freely without any password.
I knew about this hole before, just didnt know it is so easy to see it on Mac.

Does anybody know how to close this hole?
 It's all to do with Samba.  You'll need to study up on the samba documentation. I believe that you can password protect the shares.  Sorry to be vague but I have never needed to bother. This has appeared in the forums before.If you search the Security and Networking forum you might find some specific suggestions.  
« Last Edit: November 13, 2008, 03:39:48 am by tux »
Logged
3200 aka BigZ, swapped in 16GB Sandisk Extreme III CF, Cacko 1.23 full,  new SDHC >2GB module,
SL860 Cacko 1.23 full, new SDHC >2GB module,
6000L SharpRom 1.12 + Tetsu kernel,
5500 TKC home on SD x 2 (with SD>1GB),
Archos PMA30 with OPEN PMA (Giraffe),
Nokia 770 (Hackers Edition)
Nokia 800 (ITOS 2008), 4GB SDHC x 2
Asus eeepc 4G (black), with 1GB ram, dual boot Xandros on SSD with Ubuntu Lucid Lynx on 16 GB SDHC,
Tmobile G1 Android (black), with Cyanogen's  Firerat's MTD script and Amon Ra Recovery 1.7.0
Tmobile HTC Wildfire.. rooted and on Cyanogen's 7.3 nightly Rom
Kopi/Kapi on everything bar the phone and the Nokias, there is a beta for the nokias...

All the above are retired

Samsung Note 8 N5110
Samsung Note N7105
FBreader on the lot!

speculatrix

  • Administrator
  • Hero Member
  • *****
  • Posts: 3707
    • View Profile
Cacko Security Hole
« Reply #2 on: November 15, 2008, 06:34:33 pm »
take a look at /etc/samba/smb.conf and you'll be able to tweak the settings there...

very very briefly: create a username/password in the smbpasswd file for the standard non-privileged user ("smbpasswd -a username"). you can restrict then the shares to that username.
Logged
Gemini 4G/Wi-Fi owner, formerly zaurus C3100 and 860 owner; also owner of an HTC Doubleshot, a Zaurus-like phone.

gazik21

  • Newbie
  • *
  • Posts: 8
    • View Profile
Cacko Security Hole
« Reply #3 on: November 20, 2008, 06:14:20 pm »
fixed it:

- installed smbpasswd - [smbpasswd_0.1-1_arm.ipk]  from meanie's feed

- Once you installed smbpasswd, you will need to do the following to get it working:
# su
# ln -s /usr/local/samba/lib/codepages /usr/lib/samba/codepages
# rm /usr/local/samba/lib/smb.conf
# ln -s /usr/local/samba/lib/smb.conf /usr/lib/samba/smb.conf
# ln -s /usr/local/samba/private/smbpasswd /etc/smbpasswd

- then create user zaurus with password of your choice
sudo smbpasswd -a zaurus a

- to connect now: smb://zaurus  then user:zaurus and your password
Logged

speculatrix

  • Administrator
  • Hero Member
  • *****
  • Posts: 3707
    • View Profile
Cacko Security Hole
« Reply #4 on: November 20, 2008, 06:39:12 pm »
Quote from: gazik21
fixed it:

- installed smbpasswd - [smbpasswd_0.1-1_arm.ipk]  from meanie's feed

- Once you installed smbpasswd, you will need to do the following to get it working:
# su
# ln -s /usr/local/samba/lib/codepages /usr/lib/samba/codepages
# rm /usr/local/samba/lib/smb.conf
# ln -s /usr/local/samba/lib/smb.conf /usr/lib/samba/smb.conf
# ln -s /usr/local/samba/private/smbpasswd /etc/smbpasswd

- then create user zaurus with password of your choice
sudo smbpasswd -a zaurus a

- to connect now: smb://zaurus  then user:zaurus and your password


thanks for letting us know.
Logged
Gemini 4G/Wi-Fi owner, formerly zaurus C3100 and 860 owner; also owner of an HTC Doubleshot, a Zaurus-like phone.
Pages: [1]
← previous next →