Bug 20886

Summary:	mount cifs shares using protocol version > 1 not working
Product:	Mageia	Reporter:	alain bonis <albonis>
Component:	RPM Packages	Assignee:	Kernel and Drivers maintainers <kernel>
Status:	RESOLVED FIXED	QA Contact:
Severity:	major
Priority:	Normal	CC:	marja11, tmb
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	kernel-source-4.9.28-1.mga6	CVE:
Status comment:

Description alain bonis 2017-05-17 23:07:07 CEST

Taking steps to minimize attack surface against such threats as the wcry  ransomware, my organization decided to disable smb version 1.

But mounting cifs shares with the option ver=2.1 is not working in Mageia. Fails with message "CIFS VFS: Unknown vers= option specified: 2.1"

I believe because, in kernel config :
# CONFIG_CIFS_SMB2 is not set

I mark this as an enhancement, but I strongly believe this option should be enabled in mageia kernels as smb/cifs protocol v1 is "end of life". 

Steps to Reproduce:
1. try to mount a cifs share with option vers=2.1
2. see it fails
3. read the journal

Comment 1 Marja Van Waes 2017-05-19 20:03:37 CEST

(In reply to alain bonis from comment #0)
> Taking steps to minimize attack surface against such threats as the wcry 
> ransomware, my organization decided to disable smb version 1.
> 
> But mounting cifs shares with the option ver=2.1 is not working in Mageia.
> Fails with message "CIFS VFS: Unknown vers= option specified: 2.1"
> 
> I believe because, in kernel config :
> # CONFIG_CIFS_SMB2 is not set
> 
> I mark this as an enhancement, but I strongly believe this option should be
> enabled in mageia kernels as smb/cifs protocol v1 is "end of life". 

Changing from enhancement to major, then.
> 
> Steps to Reproduce:
> 1. try to mount a cifs share with option vers=2.1
> 2. see it fails
> 3. read the journal

CC: (none) => marja11
Assignee: bugsquad => kernel
Severity: enhancement => major

Comment 2 Thomas Backlund 2017-05-19 21:08:58 CEST

Enabled in svn for upcoming 4.9.29-1 for cauldron / mga6 and for mga5 in a kernel >= 4.4.69-1

CC: (none) => tmb

Comment 3 alain bonis 2017-05-22 19:07:05 CEST

Great ! 
Many thanks !

Comment 4 Thomas Backlund 2017-06-27 00:07:39 CEST

An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2017-0186.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED