Setting 'exec = no' ZFS property on Samba shares?

Status
Not open for further replies.

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,553
ZFS has a property exec = no, which I believe has the same effect as mounting a filesystem noexec. I think this would have been an effective mitigation for the Samba named pipes bug, and it's generally good practice to mount such filesystems noexec. Is there any particular reason why this isn't the default for shares in FreeNAS?

If anyone is interested, (f I have time next week) I'll load the metasploit module and try to compromise an old FreeNAS VM with the exec = no property and verify that it fixes the problem.
 
Status
Not open for further replies.
Top