From owner-freebsd-hackers Mon Jun 4 19:44:12 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from falcon.mail.pas.earthlink.net (falcon.mail.pas.earthlink.net [207.217.120.74]) by hub.freebsd.org (Postfix) with ESMTP id 1A88737B407 for ; Mon, 4 Jun 2001 19:44:10 -0700 (PDT) (envelope-from kway@overtone.org) Received: from bean.overtone.org (user-2inimal.dialup.mindspring.com [165.121.89.85]) by falcon.mail.pas.earthlink.net (EL-8_9_3_3/8.9.3) with ESMTP id TAA26320; Mon, 4 Jun 2001 19:44:05 -0700 (PDT) Received: by bean.overtone.org (Postfix, from userid 1001) id 22DFE32B2; Mon, 4 Jun 2001 22:44:06 -0400 (EDT) Date: Mon, 4 Jun 2001 22:44:05 -0400 From: Kevin Way To: Kevin Way Cc: wkb@freebie.demon.nl, hackers@freebsd.org Subject: Re: speeding up /etc/security Message-ID: <20010604224405.A43677@bean.overtone.org> References: <20010604211909.B1112@freebie.demon.nl> <20010604200828.A41130@bean.overtone.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="7AUc2qLy4jB3hD7Z" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010604200828.A41130@bean.overtone.org>; from kevin.way@overtone.org on Mon, Jun 04, 2001 at 08:08:28PM -0400 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --7AUc2qLy4jB3hD7Z Content-Type: text/plain; charset=us-ascii Content-Disposition: inline > The answer there is 'sort of'. /etc/security checks all ufs partitions > that aren't marked nosuid. if you're using anything other than UFS > (e.g. MFS,ext2,whatever), it's not getting checked at all. i hate to followup to my own message, but in order for the SUID checks to be accurate, is there a reson we don't do something like the following? --- security.orig Mon Jun 4 22:26:01 2001 +++ security Mon Jun 4 22:31:47 2001 @@ -69,7 +69,7 @@ # Note that one of the original problems, the possibility of overrunning # the args to ls, is still here... # -MP=`mount -t ufs | grep -v " nosuid" | awk '{ print $3 }' | sort` +MP=`( mount -t cd9660; mount -t ext2fs; mount -t ffs; mount -t ifs; mount -t lfs; mount -t mfs; mount -t ufs ) | grep -v ' nosuid' | awk '{ print $3 }' | sort` set ${MP} while [ $# -ge 1 ]; do mount=$1 -Kevin Way --7AUc2qLy4jB3hD7Z Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7HEd1KxA01iDoLN4RAtgvAKCB8IEZzjJ0NHKNMWEF0yHEYgFR1wCeLGy5 MuGf6b4UvcMMha1qz7HwpWQ= =SYCQ -----END PGP SIGNATURE----- --7AUc2qLy4jB3hD7Z-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message