| New User, Welcome! Login |
Re: /proc filesystem allows bypassing directory permissions on
| From: |
psz maths usyd edu au |
| To: |
gombasg sztaki hu, mrex sap com |
| Cc: |
bugtraq securityfocus com, dan lightwave net ru, jim jtan com, marco osp nl, pavel ucw cz |
| Subject: |
Re: /proc filesystem allows bypassing directory permissions on |
| Date: |
Tue - Nov 03, 2009 03:13 PM |
>>> "mount --bind" behaves like a hard link and it does not increment the link
>>> count.
>
> # touch /tmp/a
> # mount --bind /etc/passwd /tmp/a
> # ls -l /etc/passwd
> -rw-r--r-- 1 root root 1990 2009-08-24 16:22 /etc/passwd
> ...
> Two references to the same inode, yet the link count is 1 and /proc is
> nowhere in the picture.
But, mount requires root (and root can do anything, including shooting
himself in the foot).
Cheers, Paul
Paul Szabo psz@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia
|
|
|
Copyright © 1995-2012 LinuxRocket.net. All rights reserved.
Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!