Am 07.11.22 um 08:19 schrieb Jiri Slaby:
On 04. 11. 22, 15:45, Andrei Borzenkov wrote:
On 04.11.2022 17:03, Bryan Thoreson wrote:
It is now possible to configure Samba without support for the SMB1 protocol in smbd. This can be selected at configure time with either of the options:
--with-smb1-server --without-smb1-server
Mon Sep 26 09:38:59 UTC 2022 - Noel Power <nopower@suse.com>
- Disable SMB1 for tumbleweed builds.
%if 0%{?suse_version} > 1500 --without-smb1-server \ %endif
So nothing prevents you (not "you" namely, but the reporter) to link the pkg and remove the line. It's unlikely that this default will change.
Yes, of course. But this will proliferate package branching even further. network:samba:STABLE/samba is already branched 49 times at the moment. If a package is branched too many times, it is probably a sign that the original package does not meet the needs of the users. Every time the samba package changes, all 49 branches need to re-compile ... I would question the above hunk. SMB1 support needs to be explicitly activated in the smb.conf even without the above hunk. So this is a conscious decision of the user, no additional security will be gained.
For similar reasons, I linked qemu and added "server min protocol = NT1" to qemu's default samba config. To support winXP. bug 1156872, FTR.
regards,