From owner-freebsd-fs@FreeBSD.ORG  Mon Nov 21 21:20:34 2005
Return-Path: <owner-freebsd-fs@FreeBSD.ORG>
X-Original-To: freebsd-fs@freebsd.org
Delivered-To: freebsd-fs@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 715EE16A41F;
	Mon, 21 Nov 2005 21:20:34 +0000 (GMT)
	(envelope-from fullermd@over-yonder.net)
Received: from mail.localelinks.com (web.localelinks.com [65.170.254.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9168543D4C;
	Mon, 21 Nov 2005 21:20:19 +0000 (GMT)
	(envelope-from fullermd@over-yonder.net)
Received: from draco.over-yonder.net (adsl-157-22-236.jan.bellsouth.net
	[70.157.22.236])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.localelinks.com (Postfix) with ESMTP id 2A22EDE;
	Mon, 21 Nov 2005 15:20:18 -0600 (CST)
Received: by draco.over-yonder.net (Postfix, from userid 100)
	id E5B3561C1B; Mon, 21 Nov 2005 15:20:16 -0600 (CST)
Date: Mon, 21 Nov 2005 15:20:16 -0600
From: "Matthew D. Fuller" <fullermd@over-yonder.net>
To: Lowell Gilbert <freebsd-security-local@be-well.ilk.org>
Message-ID: <20051121212016.GA66837@over-yonder.net>
References: <4381BFE2.80106@icyb.net.ua> <44sltqxgj5.fsf@be-well.ilk.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <44sltqxgj5.fsf@be-well.ilk.org>
X-Editor: vi
X-OS: FreeBSD <http://www.freebsd.org/>
User-Agent: Mutt/1.5.11-fullermd.2
Cc: freebsd-fs@freebsd.org, freebsd-security@freebsd.org,
	Andriy Gapon <avg@icyb.net.ua>
Subject: Re: mount -u -r drops nosuid ?
X-BeenThere: freebsd-fs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Filesystems <freebsd-fs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-fs>
List-Post: <mailto:freebsd-fs@freebsd.org>
List-Help: <mailto:freebsd-fs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2005 21:20:34 -0000

On Mon, Nov 21, 2005 at 08:43:42AM -0500 I heard the voice of
Lowell Gilbert, and lo! it spake thus:
> 
> I think it is safer (less room to shoot yourself in the foot) to
> have the flags be exactly the ones you specified in the remount (no
> more, no less) than to have to know exactly what the state was
> beforehand.  But clearly it's possible to surprise the operator
> either way.

This is where -o current comes in.


-- 
Matthew Fuller     (MF4839)   |  fullermd@over-yonder.net
Systems/Network Administrator |  http://www.over-yonder.net/~fullermd/
           On the Internet, nobody can hear you scream.