> The answer there is 'sort of'.  /etc/security checks all ufs partitions
> that aren't marked nosuid.  if you're using anything other than UFS
> (e.g. MFS,ext2,whatever), it's not getting checked at all.

i hate to followup to my own message, but in order for the SUID checks to
be accurate, is there a reson we don't do something like the following?

--- security.orig       Mon Jun  4 22:26:01 2001
+++ security    Mon Jun  4 22:31:47 2001

@@ -69,7 +69,7 @@
 # Note that one of the original problems, the possibility of overrunning
 # the args to ls, is still here...
 #
-MP=`mount -t ufs | grep -v " nosuid" | awk '{ print $3 }' | sort`
+MP=`( mount -t cd9660; mount -t ext2fs; mount -t ffs; mount -t ifs; mount -t lfs; 
+mount -t mfs; mount -t ufs ) | grep -v ' nosuid' | awk '{ print $3 }' | sort` set 
+${MP}
 while [ $# -ge 1 ]; do
       mount=$1


        -Kevin Way

PGP signature

Reply via email to