Your message dated Sun, 8 Nov 2020 16:09:32 +0100
with message-id <[email protected]>
and subject line util-linux upstream bugs with no activity
has caused the Debian Bug report #639089,
regarding mount: man page: nosuid option, does not cover setuid/setgid 
directory case
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
639089: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639089
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mount
Version: 2.17.2-9
Severity: minor
Tags: upstream


Hi,

The mount man page documents the nosuid option as follows:
"Do not allow set-user-identifier or set-group-identifier bits to take effect. 
(This seems safe, but is in fact rather unsafe if you have suidperl(1) 
installed.)"

However, this is not quite correct. It disables the use of setuid/setgid 
executables. However, it does not affect setgid/setuid directories. The 
documentation might read better as:
"Do not allow set-user-identifier or set-group-identifier bits to take effect 
on executables. (This seems safe, but is in fact rather unsafe if you have 
suidperl(1) installed.)"

-- System Information:
Debian Release: 6.0.2
  APT prefers stable
  APT policy: (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.38-2-amd64 (SMP w/16 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mount depends on:
ii  libblkid1                     2.17.2-9   block device id library
ii  libc6                         2.11.2-10  Embedded GNU C Library: Shared lib
ii  libselinux1                   2.0.96-1   SELinux runtime shared libraries
ii  libsepol1                     2.0.41-1   SELinux library for manipulating b
ii  libuuid1                      2.17.2-9   Universally Unique ID library

mount recommends no packages.

Versions of packages mount suggests:
ii  nfs-common                    1:1.2.2-4  NFS support files common to client

-- no debconf information



--- End Message ---
--- Begin Message ---
Closing wishlist bugs that want to change upstream behaviour, with
no activity for a while.

If you feel your bug is still important enough to keep track of,
please directly contact upstream (again). Preferably with patches.

As a reminder, upstream contact points for bug reports are:
      E-MAIL: [email protected]
      Web:    https://github.com/karelzak/util-linux/issues

Best,
Chris

--- End Message ---

Reply via email to