4 ms·
> Yet it seems the WannaCry malware has gained full control of the system. This is only possible if the SMB component is not segregated. We know from Samba that
by ungzd 9y ago
> Yet it seems the WannaCry malware has gained full control of the system. This is only possible if the SMB component is not segregated. We know from Samba that this protocol can run as isolated software.
Hmm, I connected to local file sharing service on Mac Os and see /usr/sbin/smbd running as root. Is there any user isolation in Samba? And anyway there should be central process running from root to be able to switch to user after authentication. After all, it's a file sharing service and it should have access to files.