lkml.org 
[lkml]   [1997]   [Oct]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Security hole in linux-2.0.31-pre9 (NFS related)
Hi,

On Tue, 7 Oct 1997, Pavel Machek wrote:

> > The file is on a NFS-mounted filesystem with root_squash, so root cannot
> > read the file:
> >
> > Mandelbrot:/home/alex/mantel/Kernel # cat test
> > cat: test: I/O error
> > Mandelbrot:/home/alex/mantel/Kernel # cat test
> > cat: test: Permission denied
> >
> > Now, after the owner has read the file on the same machine, it is readable
> > by root afterwards:
> >
> > Mandelbrot:/home/alex/mantel/Kernel # cat test
> > blabla
>
> This _has_ to be this way. Imagine root su-ing to given user (he can
> do that). Nono. You'll need all-squash.

You're right. This bug doesn't open any new security hole. So it's simply
ugly ;-)

> Pavel

Hubert


\
 
 \ /
  Last update: 2005-03-22 13:40    [W:2.113 / U:0.152 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site