Bugzilla – Bug 134884
"cifs auto" entry in fstab displays the credentials while booting
Last modified: 2006-02-15 16:01:07 UTC
When having a line like this in your fstab: /tv/capture /mnt/tv cifs \ auto,credentials=/root/tv,uid=mifi,gid=users,workgroup=cp SUSE Linux tries to mount this share BEFORE the network is up. So /var/log/boot.msg (and therefore the startup display) containes the lines: mount.cifs kernel mount options unc=//tv\capture,ip=192.168.178.27,user= mifi,pass= xcvbnmsdf,ver=1,rw,credentials=/root/tv,uid=501,gid=100,workgroup=cp mount error 101 = Network is unreachable Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) So anyone watching the startup screen can see the credentials. This security hole does not depend on the failure of the cifs mount. Strangely enough the mount succedes automatically later on when the network is up. SUSE 9.3 shows the same problem. There is no need whatsoever to display samba share credentials during bootup.
Created attachment 58080 [details] open samba credentials in boot.msg
hmm, we forgot this bug sorry. lars, any idea?
Adding 'nocifs' to /etc/init.d/boot.localfs to exclude cifs mounts like smbfs as we have it in factory should be enough.
Frank-Michale: Thanks a lot for the report! We already fixed it in our current developed tree (named factory) as mentioned in comment #3. You can add the required fix by adding 'nocifs' to the mount -a calls in /etc/init.d/boot.localfs.
This is a duplicate of bug #134352