samba/backport-0027-CVE-2022-38023.patch
2023-01-18 07:54:39 +00:00

39 lines
1.1 KiB
Diff

From 1691cd7738b89bec284646bc81f338d8027bfc79 Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn@samba.org>
Date: Mon, 8 Feb 2021 09:48:16 +0100
Subject: [PATCH] s3:testparm: Warn about 'server schannel = no'
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Feb 9 03:08:42 UTC 2021 on sn-devel-184
Conflict: NA
Reference: https://gitlab.com/samba-team/samba/-/commit/1691cd7738b89bec284646bc81f338d8027bfc79
---
source3/utils/testparm.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c
index 2d717f19756..e870104a2c5 100644
--- a/source3/utils/testparm.c
+++ b/source3/utils/testparm.c
@@ -525,6 +525,13 @@ static int do_global_checks(void)
ret = 1;
}
+ if (!lp_server_schannel()) {
+ fprintf(stderr,
+ "WARNING: You have configured 'server schannel = no'. "
+ "Your server is vulernable to \"ZeroLogon\" "
+ "(CVE-2020-1472)\n\n");
+ }
+
return ret;
}
--
2.33.0