mirrors/vm
2
0
Fork 0
mirror of https://github.com/nextcloud/vm.git synced 2025-10-26 11:27:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

SMB-Server - Encrypt SMB transfer if AES-NI is enabled (#1640)

Browse Source
This commit is contained in:
szaimen 2020-11-01 12:14:34 +01:00 committed by GitHub
parent 54cf005b11
commit fa85acd4ff
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
not-supported/smbserver.sh
View File

@ -71,7 +71,7 @@ install_if_not samba
install_if_not members
# Use SMB3
if ! grep -q "^protocol" /etc/samba/smb.conf
if ! grep -q "^protocol" "$SMB_CONF"
then
sed -i '/\[global\]/a protocol = SMB3' "$SMB_CONF"
else
@ -86,6 +86,18 @@ else
sed -i 's|.*access based share enum =.*|access based share enum = yes|' "$SMB_CONF"
fi
# Activate encrypted transfer if AES-NI is enabled (passwords are encrypted by default)
install_if_not cpuid
if cpuid | grep " AES" | grep -q true
then
if ! grep -q "^smb encrypt =" "$SMB_CONF"
then
sed -i '/\[global\]/a smb encrypt = desired' "$SMB_CONF"
else
sed -i 's|^smb encrypt =.*|smb encrypt = desired|' "$SMB_CONF"
fi
fi
# Disable the [homes] share by default only if active
if grep -q "^\[homes\]" "$SMB_CONF"
then