smbd design
- smbd consists of a single process per connected "client".
- Multi-user Windows servers such as Citrix or Terminal server can break this assumption.
- UNIX user context is used for security.
- This is a very important point. smbd does not enforce security itself, it sets the effective userid to the UNIX uid mapped to the client context and lets the OS determine access. No "root race" holes.
- As a consequence of this smbd is single threaded. POSIX threads are not guaranteed to have a security context.
Notes:
No notes for slide 7