diff --git a/packages/network/samba/scripts/samba-config b/packages/network/samba/scripts/samba-config
index 64cd5e22a2..df2a79b3fa 100755
--- a/packages/network/samba/scripts/samba-config
+++ b/packages/network/samba/scripts/samba-config
@@ -99,7 +99,7 @@ if [ ! -f /storage/.cache/services/samba.disabled ]; then
     # this is done always in case user uses passwords in userconf.
     # many thanks to viljoviitanen for this
     printf "%s\n%s" "${SAMBA_PASSWORD}" "${SAMBA_PASSWORD}" | smbpasswd -s -a root >/dev/null 2>&1
-    printf "nobody = root\nroot = %s" "${SAMBA_USERNAME}" > /run/samba/samba.map
+    printf 'nobody = root\nroot = "%s"\n' "${SAMBA_USERNAME}" > /run/samba/samba.map
 
     sed -e 's|^.[ \t]*.public.=.*|  public = no |' \
         -e 's|^.[ \t]*.username map.=.*||' \