Article View: comp.security.misc
Article #415Secure setuid mount program - possible?
From: Buzz Moschetti
Date: Wed, 19 Aug 1992 13:26
Date: Wed, 19 Aug 1992 13:26
13 lines
986 bytes
986 bytes
We wish to make mount and umount available to two or three non-root accounts. The plan is create a C code fork/exec wrapper that does the following: 1. Verifies that the euid is root. 2. Verifies that the uid is one of the "privileged" users. 3. Forces argv[0] to be /usr/etc/(u)mount. 4. Does an execv(3) -- NOT execvp(3) -- to run the argv. The program itself is setuid root, mode 4711, so that the binary image cannot be copied and compromised: -rws--x--x 1 root 24576 Aug 17 11:51 mmount I believe this to be secure. Can someone claim otherwise?
Technical Details
Message-ID:
<BUZZ.92Aug19092622@toxicavenger.bear.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!caen!sol.ctr.columbia.edu!ursa!buzzShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!caen!sol.ctr.columbia.edu!ursa!buzz From: buzz@toxicavenger.bear.com (Buzz Moschetti) Newsgroups: comp.security.misc Subject: Secure setuid mount program - possible? Message-ID: <BUZZ.92Aug19092622@toxicavenger.bear.com> Date: 19 Aug 92 13:26:22 GMT Sender: news@ursa.UUCP Reply-To: buzz@fsrg.bear.com Distribution: comp Organization: Bear, Stearns & Co. Inc. Lines: 13