There are a couple of ways to look at this. The first is that it's no different from any off-the-shelf OS install - it'll have security vulnerabilities until it gets online updates.
The other is that smbd should not be running unless the user has actually shared something, but I think there might be valid usability reasons to have smbd enabled by default -- for instance sharing the user's home directory or a subdirectory thereof (behind access control, of course).
The moral of the story is -- check for online updates as soon as you get a new device.
There are a couple of ways to look at this. The first is that it's no different from any off-the-shelf OS install - it'll have security vulnerabilities until it gets online updates.
ReplyDeleteThe other is that smbd should not be running unless the user has actually shared something, but I think there might be valid usability reasons to have smbd enabled by default -- for instance sharing the user's home directory or a subdirectory thereof (behind access control, of course).
The moral of the story is -- check for online updates as soon as you get a new device.
Absolutely. I still think it's a great machine, but thought it only fair to point out that even Homer nods.....
ReplyDeleteAccording to today's LWN.net Weekly Edition:
ReplyDelete"Unfortunately for Eee owners, the modified Xandros distribution that comes with it does not yet have an update for Samba."
That is certainly a problem, then.
But I think that there are fixes on the Eee forums.
ReplyDelete