Messages in this thread | | | Subject | Re: [PATCH] make automounter runnable in foreground and add stderr logging | From | Valdis.Kletnieks@vt ... | Date | Thu, 07 Oct 2004 14:17:49 -0400 |
| |
On Thu, 07 Oct 2004 20:49:17 +0300, Denis Vlasenko said:
> PS: is there a reason why automount does this? > > /* include/config.h. Generated by configure. */ > #define PATH_MOUNT "/usr/bin/mount" > #define PATH_UMOUNT "/usr/bin/umount" > #define PATH_E2FSCK "/usr/bin/fsck.ext2" > #define PATH_E3FSCK "/usr/bin/fsck.ext3" > > We have $PATH for ages...
Yes, and sometimes you specifically want to make sure you pick up the right official binary, and not some other one that happens to be in $PATH. If somebody manages to get automount launched with an insecure $PATH, you could end up invoking a trojaned mount command (remember why "." in $PATH is a security issue....) [unhandled content-type:application/pgp-signature] | |