Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201103040735.33312.ludwig.nussel@suse.de>
Date: Fri, 4 Mar 2011 07:35:33 +0100
From: Ludwig Nussel <ludwig.nussel@...e.de>
To: oss-security@...ts.openwall.com
Subject: Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

Dan Rosenberg wrote:
> > One more option is to replace /etc/mtab regular file with a symlink to
> > /proc/mounts, thus making any /etc/mtab editing unneeded.
> 
> This is a very good point.  I'm not sure why /etc/mtab exists anymore
> given /proc/mounts is a more reliable source for this information.

/proc/mounts doesn't store options like user=. So replacing /etc/mtab
with a symlink wasn't feasible in general. util-linux recently
introduced /dev/.mount/utab which stores the missing information.

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.