Subject: Re: mount_ados
To: Markus Illenseer <markus@techfak.uni-bielefeld.de>
From: Chris G Demetriou <Chris_G_Demetriou@LAGAVULIN.PDL.CS.CMU.EDU>
List: amiga
Date: 12/04/1994 18:08:01
>  Actually it is a security problem, several trojan horses
> and simple SUID-programs can be made available via floppy.

egrep 'NOSUID|NODEV' /sys/sys/mount.h

i.e., _IF_ the file system allowing user-mounts supports set-id
programs or devices, the mount code can disable them, if the FS is
being mounted by a user.

This is not a problem for either adosfs or for msdosfs, because
neither file system can contain either devices or set-id programs.

for the UFS or ISO-9660 file systems, however, it would be a problem.
When those file systems are fixed to allow user mounts, they'll have
that check put into them.



cgd