Re: Bug: mount doing bad security check: only root can use -types, (effective EUID is 5013)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jun 05, 2017 at 04:07:55PM -0700, L A Walsh wrote:
> mount is Using util-linux 2.30-rc2 (libmount 2.30.0: smack, btrfs, mtab,
> debug).
> 
> Trying to mount any file system, thinks I have bad UID:
> 
> Ishtar:/mnt# /bin/mount /dev/tmpfs /mnt/tmpfs -t tmpfs
> mount: only root can use "--types" option (effective UID is 5013)

geteuid() returns 5013, so it runs in restricted mode.

> Ishtar:/mnt# echo "$UID $EUID"
> 0 0

Well, it's better to use commands like "id" rather than rely on env
variables.

> Someone else had a problem w/mount doing some bad check
> that wasn't the case.  Think they had the right bits (CAP_SYS_ADMIN),
> but the mount command was ignoring caps and looking for UID==0.

Yes, it's:

    ruid = getuid();
    euid = geteuid();

    cxt->restricted = (uid_t) 0 == ruid && ruid == euid ? 0 : 1;

in your case geteuid() returns 5013.

BTW, there is no change in this libmount code since 2010, and no
change in "only root can use" mount.c code since year 2013.

> But in this case, it "double" shouldn't matter, since I'm
> running as root.

Try to verify that you're really root ;-)

    Karel

-- 
 Karel Zak  <kzak@xxxxxxxxxx>
 http://karelzak.blogspot.com
--
To unsubscribe from this list: send the line "unsubscribe util-linux" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux