Hello,

Am Samstag, 13. Mai 2006 04:18 schrieb Volker Kuhlmann:
> 3) Suggest a line in --help to be put into /etc/fstab, which allows
> any user to mount any ISO image from a defined public place at a
> predefined mount point. MAKE SURE(!) that dev,suid are on and auto is
> off on the mount options. You might find other options useful too.

suid-root bash inside an ISO anybody? ;-)
Or do you prefer a writeable "b 3 0" device? (aka /dev/hda)?

Sorry, but this isn't a good idea.

Without dev and suid (mount options loop,ro,user) I currently don't see 
a security problem - but I can't guarantee I haven't overlooked 
something.


Regards,

Christian Boltz
-- 
Wo steht der Server eigentlich? Kann den die Putzfrau treten?
Oder mal mit dem Staubsauger überfahren? Denen fallen ab und an
Gemeinheiten ein auf die ein Normalsterblicher nie kommen würde. :\
[Daniel Lord in suse-linux]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to