freebsd security - May 2011 - Rooting FreeBSD , Privilege Escalation using Jails (P??????tur)

On 10 May 2011 16:10, "Jamie Landeg Jones"
<jamie@bishopston.net> wrote:
>
> > It used to confuzzle sysadmins on SUNos when the mount point was
> > 0700.  The underlying mode disapeared when the mount was made, but it
> > was still being enforced. Suddenly no one but root could use say /usr
> > even though it was apparently 0755
>
> I remember that happening! I thought it was like that on FreeBSD too,
> but if it was, it isn't any longer!
>
> I always make mount-points 0111 these days
>
Why not 0000? What sense does having -r+x make?

Chris

> Why not 0000? What sense does having -r+x make?
Because on some old systems I used to work with, you needed +x for it
to work. Now I know 0000 works on FreeBSD, I'll try to remember to
use that instead!