At
http://groups.google.com/group/macfuse/tree/browse_frm/thread/e118593dcf5f8caf/49246a175043450f?rnum=1&_done=%2Fgroup%2Fmacfuse%2Fbrowse_frm%2Fthread%2Fe118593dcf5f8caf%3Ftvc%3D1%26#doc_49246a175043450f
on Nov 7, 8:21 am, Graham Perrin <[email protected]> wrote:

> Using … the 2.1.9 Beta of MacFUSE announced by Erik/Tuxera on 26th
> October (.dmg dated 2010-10-20), I encountered a reproducible bug
> that affects a fusefs volume mounted by TrueCrypt
> <http://www.truecrypt.org/> 7.0a, which appears in Finder as
> 7.0.1. I'm prepared to report the detail of this bug -- probably
> to developers in the TrueCrypt area -- but first it might be
> useful to know whether processes owned by root are *denied* or
> *allowed* by TrueCrypt's use of MacFUSE. Time to go digging …

One aspect of that bug is in a pipeline, for eventual reporting to the
developer of the antivirus software.

Another aspect of the bug is outlined in the file
overview.txt
at <http://www.wuala.com/grahamperrin/public/2010/11/09/c?
mode=gallery> -- AFAICT there is, at least, a bug in the documentation
of the security model of TrueCrypt; and I have reported this bug
through the normal channel.

In a nutshell:

* as volumes mounted by TrueCrypt, and files thereon, are accessible
to all other users of the system, so I assume that TrueCrypt is using
one of the following options for MacFUSE:

allow_other
allow_root

* permissions for one user's volumes are by default ignored when
another user logs on to the system, so the setting of permissions
(advised in the documentation for TrueCrypt) is ineffective.

----

This post is simply a placeholder. A point of reference for anyone who
encounters the issue from the perspective of antivirus software, or
from the perspective of TrueCrypt, *wondering* whether their installed
version of MacFUSE is contributory to the issue.

I do **not** suspect an issue with MacFUSE -- the bug reproduces
whilst using the antivirus software on both (a) a PowerPC with MacFUSE
2.1.5 (Beta) AFAIR from Google Code, and (b) my MacBook Pro with the
2010-10-20 Tuxera distribution of macfuse-core-10.5-2.1.9.dmg

-- 
You received this message because you are subscribed to the Google Groups 
"MacFUSE" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/macfuse?hl=en.

Reply via email to