From owner-freebsd-stable@FreeBSD.ORG  Sat Nov 25 01:40:55 2006
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
X-Original-To: freebsd-stable@freebsd.org
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 4436016A412
	for <freebsd-stable@freebsd.org>; Sat, 25 Nov 2006 01:40:55 +0000 (UTC)
	(envelope-from scottl@samsco.org)
Received: from pooker.samsco.org (pooker.samsco.org [168.103.85.57])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C6CB943D69
	for <freebsd-stable@freebsd.org>; Sat, 25 Nov 2006 01:40:08 +0000 (GMT)
	(envelope-from scottl@samsco.org)
Received: from [192.168.254.11] (phobos.samsco.home [192.168.254.11])
	(authenticated bits=0)
	by pooker.samsco.org (8.13.4/8.13.4) with ESMTP id kAP1eJuP010212;
	Fri, 24 Nov 2006 18:40:24 -0700 (MST)
	(envelope-from scottl@samsco.org)
Message-ID: <45679F01.90708@samsco.org>
Date: Fri, 24 Nov 2006 18:40:17 -0700
From: Scott Long <scottl@samsco.org>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US;
	rv:1.8.0.7) Gecko/20060910 SeaMonkey/1.0.5
MIME-Version: 1.0
To: Kevin Oberman <oberman@es.net>
References: <20061125013802.20B6E45054@ptavv.es.net>
In-Reply-To: <20061125013802.20B6E45054@ptavv.es.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-1.4 required=3.8 tests=ALL_TRUSTED autolearn=failed 
	version=3.1.1
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on pooker.samsco.org
Cc: David Malone <dwmalone@maths.tcd.ie>,
	"O. Hartmann" <ohartman@zedat.fu-berlin.de>,
	FreeBSD Stable <freebsd-stable@freebsd.org>
Subject: Re: UFS Bug: FreeBSD 6.1/6.2/7.0: MOKB-08-11-2006, CVE-2006-5824,
 MOKB-03-11-2006, CVE-2006-5679
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Nov 2006 01:40:55 -0000

Kevin Oberman wrote:
>> Date: Fri, 24 Nov 2006 15:58:39 -0700
>> From: Scott Long <scottl@samsco.org>
>> Sender: owner-freebsd-stable@freebsd.org
>>
>> David Malone wrote:
>>
>>>> These two bugs are shown for FreeBSD only and I guess, Solaris and other 
>>>> BSDs  still use UFS. Are they more robust against this exploit or type 
>>>> of exploit?
>>>
>>> I don't know of a concerted effort by anyone to improve UFS in this
>>> way. I would guess that the odd bug would have been resolved, but
>>> no large scale work.
>>>
>>> 	David.
>> Another thing to keep in mind is that filesystem mounting is only 
>> available to the super-user.  If a feature came along such as 
>> automatically mounting USB drives, these bugs would indeed be critical.
>> But for now, they are not.
> 
> Not on the base system, but Gnome 2.16 with hald running will mount a
> removable device automatically. The standard configuration of Gnome runs
> hald. Allowing user mounts of removable media is even formalized by the
> addition of /media to hier(7). I'm not sure this should simply be
> treated as not being significant.

Would it be possible to restrict Gnome to only auto-mounting msdos and 
cd9660 filesystems?

Scott