Date: Tue, 10 May 2011 21:09:56 +0200 From: Jilles Tjoelker <jilles@stack.nl> To: Jamie Landeg Jones <jamie@bishopston.net> Cc: jhell@DataIX.net, db@db.net, freebsd-security@freebsd.org Subject: Re: Rooting FreeBSD , Privilege Escalation using Jails (P??????tur) Message-ID: <20110510190956.GA43634@stack.nl> In-Reply-To: <201105101508.p4AF8u8T069950@catflap.bishopston.net> References: <4DC40E21.6040503@gmail.com> <4DC4102E.8000700@gmail.com> <op.vu2g4b0k34t2sn@tech304> <BANLkTikJgPt4SM_B_7drpgFvO8RkvXaOtw@mail.gmail.com> <201105072231.p47MVktY035491@catflap.bishopston.net> <BANLkTikgnqXB4pdvCd9j9n7pFvg=n5FrdQ@mail.gmail.com> <201105091155.p49Bt604053259@catflap.bishopston.net> <20110510011249.GE2558@DataIX.net> <20110510145952.GA18253@night.db.net> <201105101508.p4AF8u8T069950@catflap.bishopston.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, May 10, 2011 at 04:08:56PM +0100, Jamie Landeg Jones wrote: > > It used to confuzzle sysadmins on SUNos when the mount point was > > 0700. The underlying mode disapeared when the mount was made, but it > > was still being enforced. Suddenly no one but root could use say /usr > > even though it was apparently 0755 > I remember that happening! I thought it was like that on FreeBSD too, > but if it was, it isn't any longer! It is still required for .. to work. For example, if the /usr directory on / is 700 but the directory on the mounted filesystem is 755, everyone can use pathnames under /usr but only root can use /usr/.. which is confusing and undesirable. > I always make mount-points 0111 these days I'd recommend to keep doing that :) -- Jilles Tjoelker
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110510190956.GA43634>