search for: nosuid

...t;> Thanks! >>> > Thanks for the quick reply. > I was surprised too. I didn't post /proc/mounts to container. I mean show the /proc/mounts of container and host in container: cat /proc/mounts [root@Donkey /]# cat /proc/mounts rootfs / rootfs rw 0 0 devpts /dev/pts devpts rw,nosuid,relatime,gid=5,mode=620,ptmxmode=666 0 0 devfs /dev tmpfs rw,nosuid,relatime,size=64k,mode=755 0 0 /dev/sdb2 / ext4 rw,relatime,data=ordered 0 0 proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0 proc /proc/sys proc ro,relatime 0 0 sysfs /sys sysfs ro,relatime 0 0 libvirt /proc/meminfo fuse rw,nos...

...d it? [root@arch ~]# uname -a Linux arch 4.8.0-39-generic #42~16.04.1-Ubuntu SMP Mon Feb 20 15:06:07 UTC 2017 x86_64 GNU/Linux [root@arch ~]# cat /proc/mounts storage/lxd_root/containers/arch / zfs rw,noatime,xattr,posixacl 0 0 none /dev tmpfs rw,relatime,size=492k,mode=755 0 0 proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0 proc /proc/sys/net proc rw,nosuid,nodev,noexec,relatime 0 0 proc /proc/sys proc ro,nosuid,nodev,noexec,relatime 0 0 proc /proc/sysrq-trigger proc ro,nosuid,nodev,noexec,relatime 0 0 sysfs /sys sysfs rw,nosuid,nodev,noexec,relatime 0 0 sysfs /sys sysfs ro,nosuid,nodev,noexe...

Hello Hendrik Can you help input 2 commands 'mount' and 'df -TPh' on OMV, and post the output to us, thank you. -- Regards, Jones Syue | ??? QNAP Systems, Inc.

...tmpfs 64M 0 64M 0% /sharedfolders/docker_dir/containers/6ba835083cc278f2efc9ca822f30c802d67a064c8646c836b0bcb28be6de17b0/mounts/shm r mount sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime) proc on /proc type proc (rw,nosuid,nodev,noexec,relatime) udev on /dev type devtmpfs (rw,nosuid,relatime,size=6084724k,nr_inodes=1521181,mode=755) devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000) tmpfs on /run type tmpfs (rw,nosuid,noe...

...ow do i get pass this error? offlinehacker:~/ $ virsh --debug 0 -c lxc:/// create o1.xml create: file(optdata): o1.xml error: Failed to create domain from o1.xml error: internal error: No valid cgroup for machine c1 My cgroups seem to be mounted: cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,release_agent=/run/current-system/systemd/lib/systemd/systemd-cgroups-agent,name=systemd) cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset) cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu) cgroup...

On Mon, Jun 10, 2013 at 09:07:08AM +0800, Gao feng wrote: > On 06/09/2013 08:14 PM, pr.G wrote: > > Hello. > > > > Is it possible to start container via libvirt_lxc without mounting /sys > > inside container? > > > > When I start container via lxc-start and do not add mount point to config, > > then /sys inside container is empty. > > >

Hi all Each lxc container on node have mounted tmpfs for cgroups tree: [root-inside-lxc@tst1 ~]# mount | grep cgroups cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu) cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset) cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory) cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices) cgroup...

...02]: (mount.c:76): Sep 25 13:45:46 ubuntucliente lightdm[702]: (mount.c:76): In some cases useful info is found in syslog - try Sep 25 13:45:46 ubuntucliente lightdm[702]: (mount.c:76): dmesg | tail or so. Sep 25 13:45:46 ubuntucliente lightdm[702]: (mount.c:558): 22 27 0:21 / /sys rw,nosuid,nodev,noexec,relatime shared:7 - sysfs sysfs rw Sep 25 13:45:46 ubuntucliente lightdm[702]: (mount.c:558): 23 27 0:4 / /proc rw,nosuid,nodev,noexec,relatime shared:12 - proc proc rw Sep 25 13:45:46 ubuntucliente lightdm[702]: (mount.c:558): 24 27 0:6 / /dev rw,nosuid,relatime shared:2 - devtmpfs ud...

...nt=1680353324, limit=59954548 Jun 10 21:25:39 postamt1 kernel: EXT3-fs error (device sd(8,6)): ext3_readdir: directory #3473659 contains a hole at offset 1852399616 $ mount /dev/sdb6 on / type auto (rw) none on /proc type proc (rw) /dev/sdb5 on /boot type ext3 (rw) /dev/sda6 on /home type ext3 (rw,nosuid,noatime) /dev/sdb8 on /tmp type ext3 (rw,nosuid,nocheck) /dev/sdb7 on /var type ext3 (rw,nosuid,noatime) /dev/sdb9 on /extra type ext3 (rw,noatime,data=journal,nocheck) /dev/hda6 on /mnt/hda type ext3 (rw,nosuid,noatime,nocheck) none on /dev/pts type devpts (rw,gid=5,mode=620) /dev/sdc6 on /copymai...

...inks do not work accross filesystems. Even thought it is a pain in the neck to do when installing your operating system, think about separating critical system files from non-critical and non-system files from system files. I would say that the following layout is a good place to start: / /usr (nosuid,nodev,ro) /usr/local (nosuid,nodev,ro) /usr/local/sbin (nodev,ro) /tmp (nosuid,noexec,nodev) /var (nosuid,noexec,nodev) /opt (nosuid,nodev,ro) /services (nosuid,noexec,nodev) /home (nosuid,nodev) Alex ------- Forwarded Message Return-Path: owner-bugtraq@netspace.org Reply-To: C0WZ1...

Not sure if this is a bug or a feature, but it seems like potential security risk: I have a ufs fs mounted rw+nosuid, then I needed to downgrade it to ro, so I executed mount -u -r on it - imagine my surpise when I found that nosuid flag was removed as well. I know I could have used mount -u -r -o nosuid, but the present behavior seems to be non-obvious (update one flag, orthogonal flags dropped as well) and dang...

Error on domain option !! Sep 25 12:04:33 ubuntucliente lightdm[702]: (mount.c:664): Password will be sent to helper as-is. Sep 25 12:04:33 ubuntucliente lightdm[702]: command: 'mount' '-t' 'cifs' '//domain-server2/FS_PRUEBA_3' '/home/prueba3/compartido' '-o' 'username=prueba3,uid=50006,gid=50027,username=prueba3,uid=50006,gid=50027,domain'

...02]: (mount.c:76): Sep 25 10:00:15 ubuntucliente lightdm[702]: (mount.c:76): In some cases useful info is found in syslog - try Sep 25 10:00:15 ubuntucliente lightdm[702]: (mount.c:76): dmesg | tail or so. Sep 25 10:00:15 ubuntucliente lightdm[702]: (mount.c:558): 22 27 0:21 / /sys rw,nosuid,nodev,noexec,relatime shared:7 - sysfs sysfs rw Sep 25 10:00:15 ubuntucliente lightdm[702]: (mount.c:558): 23 27 0:4 / /proc rw,nosuid,nodev,noexec,relatime shared:12 - proc proc rw Sep 25 10:00:15 ubuntucliente lightdm[702]: (mount.c:558): 24 27 0:6 / /dev rw,nosuid,relatime shared:2 - devtmpfs ud...

...lume fstype="fuse" > server="mbr04.subdom.example.com <http://mbr04.subdom.example.com>" > path="/srv/samba/public" > mountpoint="/home/test2/dtshare" > options=""username=%(USER),uid=%(USERUID),gid=%(USERGID),domain=%(DOMAIN_NAME),nosuid,nodev,noatime,reconnect,nonempty,allow_other,default_permissions,password_stdin" > ssh="0" noroot="0" /> > > "tail -f /var/log/syslog" ends with: > Sep 25 06:39:54 lws4 systemd[1]: home-test2-dtshare.mount: Mounting > timed out. Terminating. &gt...

...k is mounted in the privileged domain, and so cannot be mounted by a guest. 3. When I tried to umount, I got "device busy". 4. I am really surprised about the output of mount on my dom0: dom0:~# mount /dev/sda1 on / type ext3 (rw,errors=remount-ro) tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755) proc on /proc type proc (rw,noexec,nosuid,nodev) sysfs on /sys type sysfs (rw,noexec,nosuid,nodev) procbususb on /proc/bus/usb type usbfs (rw) udev on /dev type tmpfs (rw,mode=0755) tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev) devpts on /dev/pts type devpts (rw,noexec,nosuid,gid=5,mode...

I have a laptop that has no CDROM, so I have to use an ISO. Anyway, I use to be able to mount the ISO at /media/cdrom and wine would recognize it as a cdrom. Now, when I try the same thing it doesn't recognize it as a cdrom. I have added /media/cdrom as a cdrom in winecfg, but still no luck. Can someone help me out, because this is the only thing preventing me from using my program (damn DRM).

...-13 Sep 24 10:22:21 ubuntucliente kernel: [ 1975.010067] CIFS VFS: cifs_mount failed w/return code = -13 Sep 24 10:22:21 ubuntucliente lightdm[708]: (mount.c:76): mount: cannot mount //10.11.37.155/FS_PRUEBA_3 read-only Sep 24 10:22:21 ubuntucliente lightdm[708]: (mount.c:558): 22 27 0:21 / /sys rw,nosuid,nodev,noexec,relatime shared:7 - sysfs sysfs rw Sep 24 10:22:21 ubuntucliente lightdm[708]: (mount.c:558): 23 27 0:4 / /proc rw,nosuid,nodev,noexec,relatime shared:12 - proc proc rw Sep 24 10:22:21 ubuntucliente lightdm[708]: (mount.c:558): 24 27 0:6 / /dev rw,nosuid,relatime shared:2 - devtmpfs ud...

...le > Also does /var/run exist > > Rowland > > > I forgot, I do not want to update the distro at the moment. My production is currently on 12.04. Want to keep things symmetrical. I'm going to compile and build bind again. mount | grep /run tmpfs on /run type tmpfs (rw,noexec,nosuid,size=10%,mode=0755) none on /run/lock type tmpfs (rw,noexec,nosuid,nodev,size=5242880) none on /run/shm type tmpfs (rw,nosuid,nodev) -- -James

Does mounting /tmp as noexec,nosuid break anything in CentOS 5? I've been in solaris land forever and a day and this is a pretty standard security measure. I noticed CentOS comes default mounting /tmp with both those options allowed.. I'm getting constant php hack attacks against (mostly script kiddie level stuff right now) m...

...1GB swap. RH 8.0 (glibc-2.3.1-21), gcc (GCC) 3.2 20020903 We have a lot of users: oceanic:~# wc -l /etc/passwd 6694 /etc/passwd connected via SAMBA (2.2.7) from 200-300 Windows-XX workstations Partition with ext3 looks like this: oceanic:~# mount |grep ext3 /dev/sdb5 on /home1 type ext3 (rw,nosuid,nodev,usrquota) /dev/sdb6 on /home2 type ext3 (rw,nosuid,nodev,usrquota) /dev/sdc5 on /home3 type ext3 (rw,nosuid,nodev,usrquota) /dev/sdc6 on /home4 type ext3 (rw,nosuid,nodev,usrquota) /dev/sdc7 on /home5 type ext3 (rw,nosuid,nodev,usrquota) /dev/sdc8 on /home6 type ext3 (rw,nosuid,nodev,usrquota...