search for: ms_nosuid

amd from the amd-920824upl102-6.i386.rpm file distributed with RedHat Linux 4.1 does not honor the nodev option for NFS filesystems and probably other mount types, allowing any user access to the device files in /dev on a system, provided that they have root access to another linux box on the network. In addition, the default amd.conf from RH 4.1 maps /net/* to NFS mounting, which makes the bug in

This patch series allows user-specified mount commands to be sent in via kernel command line ("kinit_mount=...") or via an embedded /etc/fstab file. The first patch is a cleanup of a patch sent last November by San Mehat (http://web.archiveorange.com/archive/v/EazJNBMORV2U7E0coh5h); the next two are small improvements or bug fixes.

...pts.c @@ -89,8 +89,13 @@ parse_mount_options(char *arg, unsigned long rwflag, struct extra_opts *extra) break; } - if (res != 0 && s[0]) - add_extra_option(extra, opt); + if (res != 0 && s[0]) { + if (!strcmp(opt, "defaults")) + rwflag &= ~(MS_RDONLY|MS_NOSUID|MS_NODEV| + MS_NOEXEC|MS_SYNCHRONOUS); + else + add_extra_option(extra, opt); + } } return rwflag;

...LOCK_SIZE' redefined /usr/include/sys/mount.h:28: warning: this is the location of the previous definition /usr/include/linux/fs.h:85: warning: `MS_RDONLY' redefined /usr/include/sys/mount.h:37: warning: this is the location of the previous definition /usr/include/linux/fs.h:86: warning: `MS_NOSUID' redefined /usr/include/sys/mount.h:39: warning: this is the location of the previous definition /usr/include/linux/fs.h:87: warning: `MS_NODEV' redefined /usr/include/sys/mount.h:41: warning: this is the location of the previous definition /usr/include/linux/fs.h:88: warning: `MS_NOEXEC&...

...ymlinkat -Hilko diff --git a/helper/init.c b/helper/init.c index 50ed19e..8f3834f 100644 --- a/helper/init.c +++ b/helper/init.c @@ -181,6 +181,12 @@ main () chdir ("/"); mount_proc (); + if (mount ("tmpfs", "/run", "tmpfs", + MS_NOEXEC|MS_NOSUID, "size=10%,mode=0755") == -1) { + perror ("mount: /run"); + exit (EXIT_FAILURE); + } +y mkdir ("/run/lock", 01777); print_uptime (); /* Run /init from ext2 filesystem. */

initramfs-tools version 0.117 requires 'readlink -f' and 'mount -o defaults' to work. The first two patches were previously submitted but not applied. Ben. Ben Hutchings (3): Implement realpath() readlink: Add -f option mount: Implement -o defaults usr/include/stdlib.h | 2 ++ usr/klibc/Kbuild | 2 +- usr/klibc/realpath.c | 49

...c const struct mount_opts options[] = { {"dirsync", MS_DIRSYNC, MS_DIRSYNC, 0}, {"exec", MS_NOEXEC, 0, MS_NOEXEC}, {"move", MS_TYPE, MS_MOVE, 0}, + {"nodev", MS_NODEV, MS_NODEV, 0}, + {"noexec", MS_NOEXEC, MS_NOEXEC, 0}, + {"nosuid", MS_NOSUID, MS_NOSUID, 0}, {"recurse", MS_REC, MS_REC, 0}, {"remount", MS_TYPE, MS_REMOUNT, 0}, {"ro", MS_RDONLY, MS_RDONLY, 0},

...uot;/mnt/net/", {st_mode=S_IFDIR|0755, st_size=6, ...}) = 0 > open("/dev/fuse", O_RDWR|O_LARGEFILE) = 4 > getgid32() = 0 > getuid32() = 0 > mount("glusterfs", "/mnt/net/", "fuse"..., MS_NOSUID|MS_NODEV, "allow_other,default_permissions,"...) = 0 > geteuid32() = 0 > lstat64("/mnt", {st_mode=S_IFDIR|0755, st_size=102, ...}) = 0 > clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7dc5b08) = 11...