On Tue, Mar 09, 2010 at 11:43:07AM -0500, Thor Lancelot Simon wrote:
> On Tue, Mar 09, 2010 at 04:25:06PM +0100, Joerg Sonnenberger wrote:
> > 
> > I don't think it has to be or should be in the kernel. Basically,
> > /dev/dk3 gets created or is used by the kernel. A daemon is notified
> > (*cough* udevd) and that scans the device properties, finds the UUID and
> > creates /dev/uuid/2345324523453245. It also finds the label and creates
> > /dev/label/my-usb-stick. The latter is what you put in /etc/fstab.
> 
> And now anyone who can jack around with the userspace daemon process
> can cause you to mount a filesystem you didn't intend to mount.

This is already a problem with dkctl.  And anyway, jacking around with the
userspace daemon is unnecessarily complicated: if you have sufficient access
to do that, you probably have sufficient access to just change the symlink.

eric

Reply via email to