Scary Excel "Share Workbook" feature behavior
Update: Apple Enterprise Support suggested a modification to the /etc/smb.conf file that seems to have addressed this problem. Citing this entry in the Samba man page the suggestion is to append "nt acl support = no" at the very end of this conf file. Ours now looks like this:
; END required configuration.
[global]
use kerberos keytab = yes
realm = stanford.edu
veto files = /Thumbs.db/
veto files = /.DS_Store/
veto files = /.TemporaryItems/
log level = 1
nt acl support = no
You can also find more information by reading the authoritative Samba3-HOWTO.pdf and review sections 16.4, 16.5.3-5 and 43.5 as they pertain to this configuration option.
Original posting:
Here's something I've been chewing on that's alarming. There seems to be an exceptional issue with Microsoft Excel's "Share Workbook" feature while serving a spreadsheet on a Mac OS X Server via both AFP and CIFS.
In short, if a couple of users collaborate simultaneously on a spreadsheet, it will radically (and dangerously) alter your ACLs and POSIX-style permissions, irrespective of the parent folder's settings.
Here's how to reproduce this. Much of this is arbitrary for the sake of illustration, but it should be reproducible with other variables.
Continue reading "Scary Excel "Share Workbook" feature behavior" »
