lkml.org 
[lkml]   [2004]   [Feb]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Security patch for 2.6.2
From
Date
On Tue, 2004-02-10 at 08:47, Valdis.Kletnieks@vt.edu wrote:
> On Tue, 10 Feb 2004 17:16:37 +0100, Markus Gaugusch said:
> > On Feb 10, David Pospí¨il <foton2@post.cz> wrote:
> >
> > > Where can I find security patch for 2.6.2 ?
> > > Problem : look at this site : http://www.securityfocus.com/archive/1/353217
> > > It is remote root exploit :-(
> > No, it is local root exploit. And the patch is attached to that posting.
>
> Is the *real* problem here that smbfs doesn't understand the moral
> equivalent of 'mount -o nosuid/nodev/noexec/no-etc'?

No, the real problem is that both SAMBA 3 and Linux 2.6.x support the
CIFS Extensions for Unix and the guy who complained to BUGTRAQ doesn't
get this.

(BTW, nosuid/nodev/noexec are handled by the VFS, not the individual fs
drivers.)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:00    [W:0.038 / U:0.924 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site