5

In /etc/samba/smb.conf I have

Writable=yes
Browsable=yes

This allows pretty much open access to that folder. In a home network, where the pi is connected to a home router. Is this any danger.

I've no port forwarding. Router UPnP is off. Router guest networks are disabled. The pi doesn't leave my home. Assuming strong WPA wifi passwords, should I take additional precautions in regards to the Samba shares on the pi?

Rick
  • 155
  • 5

2 Answers2

5

Well, this is quite a hard question to answer in a way that will be acceptable to security buffs, but I'll go ahead and try anyway:

As long as you don't have any port forwards and your router remains secure, I'd say you are pretty safe, however it seems that anyone connected to your net will be able to access and change the content of your share. Note that this is not limited to WiFi - anyone that can get physical access to a connection on your routers wired interfaces will also have access.

Also, you seem to have no access control on the samba service itself. Have a look at this documentation on how to set up user and access control levels on your samba.

Bex
  • 2,929
  • 3
  • 26
  • 34
5

You are still vulnerable to:

  • Cryptolocker-style viruses running on any other computers in your network (including on any guest machines you might let on to your home network)
  • Malicious or careless users on your own network
  • Access by someone who gains access to your wireless network (WPS attack or weak/leaked wireless key)
  • Vulnerabilities in the router exposing your information to the wider internet

That list is non-exhaustive, but covers some likely scenarios. Your data may also be vulnerable to hardware failure, power outages, etc but I've assumed you specifically mean security-related vulnerabilities.

In the end, it's up to you to trade off the value of the data against how much effort you spend defending it. There's little cost to setting up user accounts and passwords, and it gives you another layer of security against some of these vulnerabilities, so seems a reasonable precaution.

Charlie
  • 51
  • 1