Article View: comp.security.misc
Article #419Re: Secure setuid mount program - possible?
From: William Unruh
Date: Wed, 19 Aug 1992 16:57
Date: Wed, 19 Aug 1992 16:57
17 lines
1506 bytes
1506 bytes
k2@bl.physik.tu-muenchen.de (Klaus Steinberger) writes:
>buzz@toxicavenger.bear.com (Buzz Moschetti) writes:
>>We wish to make mount and umount available to two or three non-root accounts.
>Its really no problem for an advanced user, to put a sh onto a
>floppy, and make it setuid root. You could forbid access to the raw
>floppy, so that nobody could fiddle around with an unmounted filesystem,
>but that's no real security, as you could fiddle with the bits on any dump PC.
I have a similar question but with mount -t pcfs on the Sun- Since it is
mounting a Dos filesystem, and since there is no ownership info on a dos
disk ( and no suid) Is it safe from floppy games (other than rebooting
from the floppy of course)
ie,
execlp("/etc/mount","mount","-t","pcfs","/dev/fd0","/pcfile",(char*)0)
Bill Unruh
unruh@physics.ubc.ca
Technical Details
Message-ID:
<unruh.714243430@physics.ubc.ca>Path:
arc1-ca.pugleaf.net!sparky!uunet!grebyn!pyrdc!gossip.pyramid.com!decwrl!mips!darwin.sura.net!zaphod.mps.ohio-state.edu!rpi!batcomputer!cornell!uw-beaver!ubc-cs!unixg.ubc.ca!physics.ubc.ca!unruhReferences:
<BUZZ.92Aug19092622@toxicavenger.bear.com> <k2.714234342@woodstock>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!grebyn!pyrdc!gossip.pyramid.com!decwrl!mips!darwin.sura.net!zaphod.mps.ohio-state.edu!rpi!batcomputer!cornell!uw-beaver!ubc-cs!unixg.ubc.ca!physics.ubc.ca!unruh From: unruh@physics.ubc.ca (William Unruh) Newsgroups: comp.security.misc Subject: Re: Secure setuid mount program - possible? Message-ID: <unruh.714243430@physics.ubc.ca> Date: 19 Aug 92 16:57:10 GMT References: <BUZZ.92Aug19092622@toxicavenger.bear.com> <k2.714234342@woodstock> Sender: news@unixg.ubc.ca (Usenet News Maintenance) Distribution: comp Organization: University of British Columbia, Vancouver, B.C., Canada Lines: 17 Nntp-Posting-Host: physics.ubc.ca