This note was attached to the Samba 2.2.8 release notes as it contained an important security fix. The information contained here applies to Samba installations in general.
A new apprentice reported for duty to the chief engineer of a boiler house. He said, “Here I am, if you will show me the boiler I’ll start working on it.” Then engineer replied, “You’re leaning on it!”
Security concerns are just like that. You need to know a little about the subject to appreciate how obvious most of it really is. The challenge for most of us is to discover that first morsel of knowledge with which we may unlock the secrets of the masters.
There are three levels at which security principals must be observed ...