Re: Bug with dropping privileges when calling helpers: Is it critical?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Karel Zak wrote:

>  That's CVE-2007-5191. It wasn't evaluated as a critical security bug.
>  I think it already has been fixed in all major distributions.

Not in Slackware.

>  There is 2.13.0.1 release, see announce:
>      http://marc.info/?l=util-linux-ng&m=119304720010975&w=2

Nice to know. Forwared this to security_at_slackware_dot_com.

>  It's not so simple, you need a relevant entry in /etc/fstab, because
>  mount(8) always checks your privileges before an
> exec(/sbin/mount.<type>).

I only have /sbin/mount.nfs. Does this mean, that one of my fstab-entries, which mounts an nfs share, has to be defined with the option "users" or "user"? As I don't have this, I'm not affected by this one?

Thanks in advance

CU

Manuel
-- 
Psssst! Schon vom neuen GMX MultiMessenger gehört?
Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger?did=10
-
To unsubscribe from this list: send the line "unsubscribe util-linux-ng" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux