Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Nov 2023 15:47:16 +0100 (CET)
From:      Ronald Klop <ronald-lists@klop.ws>
To:        Emmanuel Vadot <manu@FreeBSD.org>
Cc:        dev-commits-src-all@FreeBSD.org, src-committers@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Subject:   Re: git: 0b7c89c8c236 - main - autofs: media: Don't include  nosuid in the script
Message-ID:  <2003387449.7766.1700837236386@localhost>
In-Reply-To: <202311240945.3AO9jgdS079780@gitrepo.freebsd.org>
References:  <202311240945.3AO9jgdS079780@gitrepo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
------=_Part_7765_896222002.1700837236314
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

Wouldn't this apply for a /usr/src/UPDATING or /usr/src/RELNOTES entry?
As it might change default behaviour on a security measure.

Regards.
Ronald.

 
Van: Emmanuel Vadot <manu@FreeBSD.org>
Datum: vrijdag, 24 november 2023 10:45
Aan: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Onderwerp: git: 0b7c89c8c236 - main - autofs: media: Don't include nosuid in the script
> 
> The branch main has been updated by manu:
> 
> URL: https://cgit.FreeBSD.org/src/commit/?id=0b7c89c8c236fcfabd1abd59c6b8274c7eb80f5e
> 
> commit 0b7c89c8c236fcfabd1abd59c6b8274c7eb80f5e
> Author:     Emmanuel Vadot <manu@FreeBSD.org>
> AuthorDate: 2023-11-07 09:42:53 +0000
> Commit:     Emmanuel Vadot <manu@FreeBSD.org>
> CommitDate: 2023-11-24 09:44:20 +0000
> 
>     autofs: media: Don't include nosuid in the script
>     
>     We already have nosuid option in auto_master so no need to redefine it.
>     Also it's easier for a user to modify the auto_master configuration file
>     than the script (which shouldn't be modified).
>     
>     Sponsored by:   Beckhoff Automation GmbH & Co. KG
>     Differential Revision:  https://reviews.freebsd.org/D42492
>     Reviewed by:    rew
> ---
>  usr.sbin/autofs/autofs/special_media | 8 ++++----
>  1 file changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/usr.sbin/autofs/autofs/special_media b/usr.sbin/autofs/autofs/special_media
> index d72ddddddb2e..33fa4544d028 100755
> --- a/usr.sbin/autofs/autofs/special_media
> +++ b/usr.sbin/autofs/autofs/special_media
> @@ -40,7 +40,7 @@ print_map_entry() {
>     case "${_fstype}" in
>     "exfat")
>         if [ -f "/usr/local/sbin/mount.exfat" ]; then
> -           echo "-mountprog=/usr/local/sbin/mount.exfat,fstype=${_fstype},nosuid   :/dev/${_p}"
> +           echo "-mountprog=/usr/local/sbin/mount.exfat,fstype=${_fstype}  :/dev/${_p}"
>         else
>             /usr/bin/logger -p info -t "special_media[$$]" \
>                 "Cannot mount ${_fstype} formatted device /dev/${_p}: Install sysutils/fusefs-exfat first"
> @@ -49,7 +49,7 @@ print_map_entry() {
>         ;;
>     "ntfs")
>         if [ -f "/usr/local/bin/ntfs-3g" ]; then
> -           echo "-mountprog=/usr/local/bin/ntfs-3g,fstype=${_fstype},nosuid    :/dev/${_p}"
> +           echo "-mountprog=/usr/local/bin/ntfs-3g,fstype=${_fstype}   :/dev/${_p}"
>         else
>             /usr/bin/logger -p info -t "special_media[$$]" \
>                 "Cannot mount ${_fstype} formatted device /dev/${_p}: Install sysutils/fusefs-ntfs first"
> @@ -57,10 +57,10 @@ print_map_entry() {
>         fi
>         ;;
>     "ext2fs" | "msdosfs")
> -       echo "-fstype=${_fstype},nosuid,async   :/dev/${_p}"
> +       echo "-fstype=${_fstype},async  :/dev/${_p}"
>         ;;
>     *)
> -       echo "-fstype=${_fstype},nosuid :/dev/${_p}"
> +       echo "-fstype=${_fstype}    :/dev/${_p}"
>         ;;
>     esac
>  }
>  
> 
> 
> 

 
------=_Part_7765_896222002.1700837236314
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<html><head></head><body>Hi,<br>
<br>
Wouldn't this apply for a /usr/src/UPDATING or /usr/src/RELNOTES entry?<br>
As it might change default behaviour on a security measure.<br>
<br>
Regards.<br>
Ronald.<br>
<br>
&nbsp;
<p><strong>Van:</strong> Emmanuel Vadot &lt;manu@FreeBSD.org&gt;<br>
<strong>Datum:</strong> vrijdag, 24 november 2023 10:45<br>
<strong>Aan:</strong> src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org<br>
<strong>Onderwerp:</strong> git: 0b7c89c8c236 - main - autofs: media: Don't include nosuid in the script</p>

<blockquote style="padding-right: 0px; padding-left: 5px; margin-left: 5px; border-left: #000000 2px solid; margin-right: 0px">
<div class="MessageRFC822Viewer" id="P">
<div class="TextPlainViewer" id="P.P">The branch main has been updated by manu:<br>
<br>
URL: <a href="https://cgit.FreeBSD.org/src/commit/?id=0b7c89c8c236fcfabd1abd59c6b8274c7eb80f5e">https://cgit.FreeBSD.org/src/commit/?id=0b7c89c8c236fcfabd1abd59c6b8274c7eb80f5e</a><br>;
<br>
commit 0b7c89c8c236fcfabd1abd59c6b8274c7eb80f5e<br>
Author: &nbsp;&nbsp;&nbsp;&nbsp;Emmanuel Vadot &lt;manu@FreeBSD.org&gt;<br>
AuthorDate: 2023-11-07 09:42:53 +0000<br>
Commit: &nbsp;&nbsp;&nbsp;&nbsp;Emmanuel Vadot &lt;manu@FreeBSD.org&gt;<br>
CommitDate: 2023-11-24 09:44:20 +0000<br>
<br>
&nbsp;&nbsp;&nbsp;&nbsp;autofs: media: Don't include nosuid in the script<br>
&nbsp;&nbsp;&nbsp;&nbsp;<br>
&nbsp;&nbsp;&nbsp;&nbsp;We already have nosuid option in auto_master so no need to redefine it.<br>
&nbsp;&nbsp;&nbsp;&nbsp;Also it's easier for a user to modify the auto_master configuration file<br>
&nbsp;&nbsp;&nbsp;&nbsp;than the script (which shouldn't be modified).<br>
&nbsp;&nbsp;&nbsp;&nbsp;<br>
&nbsp;&nbsp;&nbsp;&nbsp;Sponsored by: &nbsp;&nbsp;Beckhoff Automation GmbH &amp; Co. KG<br>
&nbsp;&nbsp;&nbsp;&nbsp;Differential Revision: &nbsp;<a href="https://reviews.freebsd.org/D42492">https://reviews.freebsd.org/D42492</a><br>;
&nbsp;&nbsp;&nbsp;&nbsp;Reviewed by: &nbsp;&nbsp;&nbsp;rew<br>
---<br>
&nbsp;usr.sbin/autofs/autofs/special_media | 8 ++++----<br>
&nbsp;1 file changed, 4 insertions(+), 4 deletions(-)<br>
<br>
diff --git a/usr.sbin/autofs/autofs/special_media b/usr.sbin/autofs/autofs/special_media<br>
index d72ddddddb2e..33fa4544d028 100755<br>
--- a/usr.sbin/autofs/autofs/special_media<br>
+++ b/usr.sbin/autofs/autofs/special_media<br>
@@ -40,7 +40,7 @@ print_map_entry() {<br>
&nbsp;&nbsp;&nbsp;&nbsp;case "${_fstype}" in<br>
&nbsp;&nbsp;&nbsp;&nbsp;"exfat")<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if [ -f "/usr/local/sbin/mount.exfat" ]; then<br>
- &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-mountprog=/usr/local/sbin/mount.exfat,fstype=${_fstype},nosuid &nbsp;&nbsp;:/dev/${_p}"<br>
+ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-mountprog=/usr/local/sbin/mount.exfat,fstype=${_fstype} &nbsp;:/dev/${_p}"<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;else<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/usr/bin/logger -p info -t "special_media[$$]" \<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"Cannot mount ${_fstype} formatted device /dev/${_p}: Install sysutils/fusefs-exfat first"<br>
@@ -49,7 +49,7 @@ print_map_entry() {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;;;<br>
&nbsp;&nbsp;&nbsp;&nbsp;"ntfs")<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if [ -f "/usr/local/bin/ntfs-3g" ]; then<br>
- &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-mountprog=/usr/local/bin/ntfs-3g,fstype=${_fstype},nosuid &nbsp;&nbsp;&nbsp;:/dev/${_p}"<br>
+ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-mountprog=/usr/local/bin/ntfs-3g,fstype=${_fstype} &nbsp;&nbsp;:/dev/${_p}"<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;else<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/usr/bin/logger -p info -t "special_media[$$]" \<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"Cannot mount ${_fstype} formatted device /dev/${_p}: Install sysutils/fusefs-ntfs first"<br>
@@ -57,10 +57,10 @@ print_map_entry() {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;fi<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;;;<br>
&nbsp;&nbsp;&nbsp;&nbsp;"ext2fs" | "msdosfs")<br>
- &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-fstype=${_fstype},nosuid,async &nbsp;&nbsp;:/dev/${_p}"<br>
+ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-fstype=${_fstype},async &nbsp;:/dev/${_p}"<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;;;<br>
&nbsp;&nbsp;&nbsp;&nbsp;*)<br>
- &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-fstype=${_fstype},nosuid :/dev/${_p}"<br>
+ &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;echo "-fstype=${_fstype} &nbsp;&nbsp;&nbsp;:/dev/${_p}"<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;;;<br>
&nbsp;&nbsp;&nbsp;&nbsp;esac<br>
&nbsp;}<br>
&nbsp;</div>

<hr></div>
</blockquote>
<br>
&nbsp;</body></html>
------=_Part_7765_896222002.1700837236314--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2003387449.7766.1700837236386>