Richard,

        I already responded to a solution I received and CC'd the list -
so you will probably have read it by the time you read this. I would just
like to make a comment about your statement 'Security I would imagine'.

        It is hard to see how the 'mount' output enables security. The
manpage for 'mount' clearly states that the 'user' option by default
implies 'noexec,nosuid,nodev', and these options are indeed being reported
in the 'mount' output. So any cracker can make the reasonable assumption
that mount entries with the 'noexec,nosuid,nodev' options are user
mountable / unmountable. 

        And, anyway, even if this were not true, nothing would stop a
cracker from trying all the mount entries on a system. If this is
security, it is a very poor idea of security, since this is security by
obscurity. 

Kenneth

There is no such thing as luck. 'Luck' is nothing but an absence of bad luck.

On Sun, 27 Dec 1998, Richard Adams wrote:

> According to Kenneth Stephen: While burning my CPU.
> > 
> > 
> > Hi,
> > 
> >     Here is an entry from my /etc/fstab :
> > 
> > /dev/hda1                 /C                        msdos  rw,user,nosuid
> > 0 0
> > 
> >     And here is the corresponding output of the 'mount' (with no
> > arguments) command :
> > 
> > /dev/hda1 on /C type msdos (rw,noexec,nosuid,nodev) 
> > 
> >     I can successfully umount it as an ordinary user but cannot mount
> > it. I get the message 'only root can do that' when I try to mont it as an
> > ordinary user. Why?
> 
> It does work here on "all" my systems, and yes exactly as you are trying it.
> I have checked if an absent entry in /etc/group for a particular user would
> cause this problem, but thats not it, the only thing i can think of at the
> minute is that your /bin/mount does not have the correct permissions, i have
> 
> -rwsr-xr-x   1 root     root
> 
> > 
> >     Also, why does the 'user' option (which was specified in the
> > fstab) not show up on the output of mount?
> 
> Securety i would imagen.
> 
> > 
> >     This doesnt seem to be an msdos problem as I get the same results
> > with an ext2 fs.
> > 
> > Kenneth
> >  
> > There is no such thing as luck. 'Luck' is nothing but an absence of bad luck.
> > 
> 
> 
> -- 
> Regards Richard.
> [EMAIL PROTECTED]
> 
> Happy New Year, and may all your troubles be small (ones).
> 

Reply via email to