• Steve French's avatar
    [SMB3] Improve security, move default dialect to SMB3 from old CIFS · eef914a9
    Steve French authored
    Due to recent publicity about security vulnerabilities in the
    much older CIFS dialect, move the default dialect to the
    widely accepted (and quite secure) SMB3.0 dialect from the
    old default of the CIFS dialect.
    
    We do not want to be encouraging use of less secure dialects,
    and both Microsoft and CERT now strongly recommend not using the
    older CIFS dialect (SMB Security Best Practices
    "recommends disabling SMBv1").
    
    SMB3 is both secure and widely available: in Windows 8 and later,
    Samba and Macs.
    
    Users can still choose to explicitly mount with the less secure
    dialect (for old servers) by choosing "vers=1.0" on the cifs
    mount
    Signed-off-by: default avatarSteve French <smfrench@gmail.com>
    Reviewed-by: default avatarPavel Shilovsky <pshilov@microsoft.com>
    eef914a9
connect.c 113 KB