Windows users are able to access NFS share despite of no permissions

Last updated

Oct 17, 2024
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 104

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:: 10/17/2024, 1:57:57 AM

Applies to

ONTAP 9
CIFS

Issue

Window users able to write on volume path which is unix security style with mode bits 775.

::> vserver security file-directory show -vserver svm -path /vol/Folder/Folder1/Folder2

                Vserver: svm 
                File Path: /vol/Folder/Folder1/Folder2
      File Inode Number: 1183479
         Security Style: unix
        Effective Style: unix
         DOS Attributes: 10
DOS Attributes in Text: ----D---
Expanded Dos Attributes: -
   UNIX User Id: 34071
          UNIX Group Id: 0000
         UNIX Mode Bits: 775
UNIX Mode Bits in Text: rwxrwxr-xCopied

User is getting mapped to pcuser which has only read and execute permission, but still they are able to write on the share.
Sectrace shows below error :

svm 1 Security Style: UNIX Access is allowed because the permissions user has UNIX owner privileges, the user has UNIX permissions while opening existing file or directory. Access is granted for: "Read Control", "Write Attributes", "Read Attributes", "Write EA", "Read EA", "Append", "Write", "Read" Protocol: cifs Volume: - Share: Folder1 Path:vol/Folder/Folder1/Folder2 Win-User: DOMAIN\ user UNIX-User: pcuser Session-ID: 15305201858646175266