On Sat, Oct 28, 2017 at 10:46:27AM -0400, Phil Pennock wrote:
> On 2017-10-28 at 15:58 +0200, Heiko Schlittermann via Exim-users wrote:
> > So, what's the owner of the binary? And - does your OS provide some
> > means to disallow set-uid binaries from setting the (e)uid (Linux has,
> > but has your *BSD?)
> 
> Yes.  FreeBSD supports nosuid mounts.  With ZFS, it's even an
> inheritable property on the dataset.  In either case, just running
> `mount` and looking for the mount-point where the binary lives should
> reveal it.
> 
> Eg:
> 
>   # mount | grep music
>   cast/media/music on /mnt/cast/media/music (zfs, local, noatime, noexec, 
> nosuid, nfsv4acls)
>   # zfs get setuid cast/media/music
>   NAME              PROPERTY  VALUE   SOURCE
>   cast/media/music  setuid    off     inherited from cast/media
> 
> Hope this helps with debugging,
> -Phil
Tried to convert to ZFS recently, but could not
so I am stuck in UFS :-(
> 
> -- 
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on Atheism
Talk Sense to a fool and he calls you foolish - Euripides

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to