[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SunOS :rmmount, no nosuid.




"C.J. Oster" wrote:
> 
> On Mon, 10 May 1999, Jonas Stahre wrote:
> 
> > The man-page for rmmount under SunOS 5.7 says:
> >
> >      File systems mounted by rmmount  are always mounted with the
> >      nosuid  flag  set,  thereby  disabling  set-uid programs and
> >      access to block or character devices in  that  file  system.
> > 
> > ...this is unfortunately wrong.
> > 
> > All you have to do to get root-privileges is to insert a floppy/cdrom with
> > a setuid shell and a volcheck and an evil grin later you have a root
> > prompt.
> > 
> >There is a workaround that fix the problem, just add these lines to your
> >/etc/rmmount.conf:
> >
> >mount hsfs -o nosuid
> >mount ufs -o nosuid
> 
> In testing, I found this workaround to be ineffective.  What is required
> is the folowing...
> 
> mount floppy* -o nosuid
> mount cdrom* -o nosuid
> 
> PS Tested on an Ultra10 with a floppy.
> 
> -CJO-
> 
>                 C.J. Oster (Linux Guru/Surge Addict)
> ------------------------------------------------------------------
> | cjo@pobox.com   |   910 S. 3rd St, #1218  |   CCSO, WSG, UIUC  |
> | oster@uiuc.edu  |   Champaign, IL 61820   |   1443 DCL, Urbana |
> | ---------------------------------------------------------------|
> |    PGP: 87D5 4216 43A1 42D6 754D  8F5E 24B3 992A B7A1 F556     |
> ------------------------------------------------------------------
>                    (580)761-6393 (217)328-8934
>       "Linux, for people with an IQ above 98" - Bumper Sticker
>  "Hm, a little big for a cup holder... Why does it say '4x' on it?"