From owner-freebsd-security@FreeBSD.ORG Tue May 10 19:09:58 2011 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0AE26106566C for ; Tue, 10 May 2011 19:09:58 +0000 (UTC) (envelope-from jilles@stack.nl) Received: from mx1.stack.nl (relay02.stack.nl [IPv6:2001:610:1108:5010::104]) by mx1.freebsd.org (Postfix) with ESMTP id 9C24F8FC25 for ; Tue, 10 May 2011 19:09:57 +0000 (UTC) Received: from turtle.stack.nl (turtle.stack.nl [IPv6:2001:610:1108:5010::132]) by mx1.stack.nl (Postfix) with ESMTP id F0A143593D0; Tue, 10 May 2011 21:09:56 +0200 (CEST) Received: by turtle.stack.nl (Postfix, from userid 1677) id DB295172F8; Tue, 10 May 2011 21:09:56 +0200 (CEST) Date: Tue, 10 May 2011 21:09:56 +0200 From: Jilles Tjoelker To: Jamie Landeg Jones Message-ID: <20110510190956.GA43634@stack.nl> References: <4DC40E21.6040503@gmail.com> <4DC4102E.8000700@gmail.com> <201105072231.p47MVktY035491@catflap.bishopston.net> <201105091155.p49Bt604053259@catflap.bishopston.net> <20110510011249.GE2558@DataIX.net> <20110510145952.GA18253@night.db.net> <201105101508.p4AF8u8T069950@catflap.bishopston.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <201105101508.p4AF8u8T069950@catflap.bishopston.net> User-Agent: Mutt/1.5.21 (2010-09-15) Cc: jhell@DataIX.net, db@db.net, freebsd-security@freebsd.org Subject: Re: Rooting FreeBSD , Privilege Escalation using Jails (P??????tur) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 May 2011 19:09:58 -0000 On Tue, May 10, 2011 at 04:08:56PM +0100, Jamie Landeg Jones wrote: > > It used to confuzzle sysadmins on SUNos when the mount point was > > 0700. The underlying mode disapeared when the mount was made, but it > > was still being enforced. Suddenly no one but root could use say /usr > > even though it was apparently 0755 > I remember that happening! I thought it was like that on FreeBSD too, > but if it was, it isn't any longer! It is still required for .. to work. For example, if the /usr directory on / is 700 but the directory on the mounted filesystem is 755, everyone can use pathnames under /usr but only root can use /usr/.. which is confusing and undesirable. > I always make mount-points 0111 these days I'd recommend to keep doing that :) -- Jilles Tjoelker