From owner-freebsd-security@FreeBSD.ORG Mon Nov 21 21:20:34 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP id 715EE16A41F;
Mon, 21 Nov 2005 21:20:34 +0000 (GMT)
(envelope-from fullermd@over-yonder.net)
Received: from mail.localelinks.com (web.localelinks.com [65.170.254.5])
by mx1.FreeBSD.org (Postfix) with ESMTP id 9168543D4C;
Mon, 21 Nov 2005 21:20:19 +0000 (GMT)
(envelope-from fullermd@over-yonder.net)
Received: from draco.over-yonder.net (adsl-157-22-236.jan.bellsouth.net
[70.157.22.236])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mail.localelinks.com (Postfix) with ESMTP id 2A22EDE;
Mon, 21 Nov 2005 15:20:18 -0600 (CST)
Received: by draco.over-yonder.net (Postfix, from userid 100)
id E5B3561C1B; Mon, 21 Nov 2005 15:20:16 -0600 (CST)
Date: Mon, 21 Nov 2005 15:20:16 -0600
From: "Matthew D. Fuller" <fullermd@over-yonder.net>
To: Lowell Gilbert <freebsd-security-local@be-well.ilk.org>
Message-ID: <20051121212016.GA66837@over-yonder.net>
References: <4381BFE2.80106@icyb.net.ua> <44sltqxgj5.fsf@be-well.ilk.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <44sltqxgj5.fsf@be-well.ilk.org>
X-Editor: vi
X-OS: FreeBSD <http://www.freebsd.org/>
User-Agent: Mutt/1.5.11-fullermd.2
Cc: freebsd-fs@freebsd.org, freebsd-security@freebsd.org,
Andriy Gapon <avg@icyb.net.ua>
Subject: Re: mount -u -r drops nosuid ?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2005 21:20:34 -0000
On Mon, Nov 21, 2005 at 08:43:42AM -0500 I heard the voice of
Lowell Gilbert, and lo! it spake thus:
>
> I think it is safer (less room to shoot yourself in the foot) to
> have the flags be exactly the ones you specified in the remount (no
> more, no less) than to have to know exactly what the state was
> beforehand. But clearly it's possible to surprise the operator
> either way.
This is where -o current comes in.
--
Matthew Fuller (MF4839) | fullermd@over-yonder.net
Systems/Network Administrator | http://www.over-yonder.net/~fullermd/
On the Internet, nobody can hear you scream.