I am using
QEMU/KVM for virtualization of various guest systems and
Samba to provide an exchange folder (shared-folder) between the host-OS and the guest-OS.
Now I want to protect this
Samba-provided shared folder against foreign access. It should be accessible only by
QEMU-virtualized guests, but not for other third party people in the same network.
My current configuration in
/etc/samba/smb.conf looks like that:
[global] workgroup = WORKGROUP security = user map to guest = Bad User server string = %h server (Samba, Ubuntu) dns proxy = No wins support = Yes usershare allow guests = Yes panic action = /usr/share/samba/panic-action %d lanman auth = no ntlm auth = no follow symlinks = yes wide links = yes load printers = no disable spoolss = yes [Shared] comment = Shared Folder for QEMU path = /home/myusername/Exchange public = no browseable = yes writeable = yes read only = no guest ok = yes force user = myusername
Now the central question is:
Do you have any recommendations how I could implement such a security hardening feature?
Thank you very much!