Removal or updating of "mount_smbfs" from FreeBSD operating system

[Yuri Pankov]

Gerard Seibert wrote:
> TO WHOM IT MAY CONCERN
> 
> The “SMBv1” protocol is a security hazard and was depreciated by Microsoft in
> 2014. There is virtually no use for it anymore.
> 
> The “mount_smbfs” utility in FreeBSD only uses that protocol, which results
> in making it useless with newer versions of Microsoft’s operating systems, as
> well as other OS’s that have depreciated the use of SMBv1.
> 
> I would like to suggest that FreeBSD do one of the following:
> 
> 1) Remove “mount_smbfs” from FreeBSD. This would probably be in versions 12.1
> or 13. It is perhaps too late to get into FreeBSD 12.

I don't think this is reasonable, more so in a hurry, as this is a
client, and doesn't impose any security issues.

> 2) Update “mount_smbfs” so that it is compatible with versions SMBv3 and
> greater. While "SMBv2" is not dead, it is definitely comatose. This would be a
> better idea if someone had the time to do it.

There's an entry in https://wiki.freebsd.org/DevSummit/201810:

----------------------------------------------------------------------
updated mount SMBFS smbv3 support (iXsystems)
----------------------------------------------------------------------

I wonder if we could get a bit more information on this -- is this just
a plan, or is it being actively worked on/ready for integration?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20181126/9618517f/attachment.sig>