Date: Wed, 22 Oct 1997 10:37:46 +1000 From: Bruce Evans <bde@zeta.org.au> To: dwmalone@maths.tcd.ie, gnat@frii.com Cc: current@freebsd.org, freebsd-stable@freebsd.org Subject: Re: -STABLE reboots Message-ID: <199710220037.KAA17789@godzilla.zeta.org.au>
next in thread | raw e-mail | index | archive | help
>> Last time I checked any user could generate a panic >> similar to this by typing: >> mkdir /tmp/t >> mount_msdos /tmp/t /tmp/t >> Is anyone likely to have done this? This is an old problem. `mount -t any /foo /foo' always panics. Fix: don't do that. However, since mount_msdos is setuid root, anyone can do that using any = msdos. Fix in 2.2: mount_msdos should not be setuid root. The problem is more serious in -current, since mount(2) is unprivileged, so even `mount /foo /foo' panics (if the mounter is root or owns /foo). Bruce
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199710220037.KAA17789>