Bug 20886 - mount cifs shares using protocol version > 1 not working
Summary: mount cifs shares using protocol version > 1 not working
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Kernel and Drivers maintainers
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-05-17 23:07 CEST by alain bonis
Modified: 2017-06-27 00:07 CEST (History)
2 users (show)

See Also:
Source RPM: kernel-source-4.9.28-1.mga6
CVE:
Status comment:


Attachments

Description alain bonis 2017-05-17 23:07:07 CEST
Taking steps to minimize attack surface against such threats as the wcry  ransomware, my organization decided to disable smb version 1.

But mounting cifs shares with the option ver=2.1 is not working in Mageia. Fails with message "CIFS VFS: Unknown vers= option specified: 2.1"

I believe because, in kernel config :
# CONFIG_CIFS_SMB2 is not set

I mark this as an enhancement, but I strongly believe this option should be enabled in mageia kernels as smb/cifs protocol v1 is "end of life". 

Steps to Reproduce:
1. try to mount a cifs share with option vers=2.1
2. see it fails
3. read the journal
Comment 1 Marja Van Waes 2017-05-19 20:03:37 CEST
(In reply to alain bonis from comment #0)
> Taking steps to minimize attack surface against such threats as the wcry 
> ransomware, my organization decided to disable smb version 1.
> 
> But mounting cifs shares with the option ver=2.1 is not working in Mageia.
> Fails with message "CIFS VFS: Unknown vers= option specified: 2.1"
> 
> I believe because, in kernel config :
> # CONFIG_CIFS_SMB2 is not set
> 
> I mark this as an enhancement, but I strongly believe this option should be
> enabled in mageia kernels as smb/cifs protocol v1 is "end of life". 

Changing from enhancement to major, then.
> 
> Steps to Reproduce:
> 1. try to mount a cifs share with option vers=2.1
> 2. see it fails
> 3. read the journal

CC: (none) => marja11
Assignee: bugsquad => kernel
Severity: enhancement => major

Comment 2 Thomas Backlund 2017-05-19 21:08:58 CEST
Enabled in svn for upcoming 4.9.29-1 for cauldron / mga6 and for mga5 in a kernel >= 4.4.69-1

CC: (none) => tmb

Comment 3 alain bonis 2017-05-22 19:07:05 CEST
Great ! 
Many thanks !
Comment 4 Thomas Backlund 2017-06-27 00:07:39 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2017-0186.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.