Date: Mon, 4 Jun 2001 22:44:05 -0400 From: Kevin Way <kevin.way@overtone.org> To: Kevin Way <kevin.way@overtone.org> Cc: wkb@freebie.demon.nl, hackers@freebsd.org Subject: Re: speeding up /etc/security Message-ID: <20010604224405.A43677@bean.overtone.org> In-Reply-To: <20010604200828.A41130@bean.overtone.org>; from kevin.way@overtone.org on Mon, Jun 04, 2001 at 08:08:28PM -0400 References: <p05100300b741879b7bc3@[192.168.168.205]> <Pine.LNX.4.21.0106041205070.3177-100000@zeppo.feral.com> <20010604211909.B1112@freebie.demon.nl> <20010604200828.A41130@bean.overtone.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--7AUc2qLy4jB3hD7Z
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
> The answer there is 'sort of'. /etc/security checks all ufs partitions
> that aren't marked nosuid. if you're using anything other than UFS
> (e.g. MFS,ext2,whatever), it's not getting checked at all.
i hate to followup to my own message, but in order for the SUID checks to
be accurate, is there a reson we don't do something like the following?
--- security.orig Mon Jun 4 22:26:01 2001
+++ security Mon Jun 4 22:31:47 2001
@@ -69,7 +69,7 @@
# Note that one of the original problems, the possibility of overrunning
# the args to ls, is still here...
#
-MP=`mount -t ufs | grep -v " nosuid" | awk '{ print $3 }' | sort`
+MP=`( mount -t cd9660; mount -t ext2fs; mount -t ffs; mount -t ifs; mount -t lfs; mount -t mfs; mount -t ufs ) | grep -v ' nosuid' | awk '{ print $3 }' | sort` set ${MP}
while [ $# -ge 1 ]; do
mount=$1
-Kevin Way
--7AUc2qLy4jB3hD7Z
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org
iD8DBQE7HEd1KxA01iDoLN4RAtgvAKCB8IEZzjJ0NHKNMWEF0yHEYgFR1wCeLGy5
MuGf6b4UvcMMha1qz7HwpWQ=
=SYCQ
-----END PGP SIGNATURE-----
--7AUc2qLy4jB3hD7Z--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010604224405.A43677>