Re: kern/29360: vfs.generic.usermount and mount(8) general questions

[Wolfgang Solfrank <Wolfgang%Solfrank.net@localhost>]

The following reply was made to PR kern/29360; it has been noted by GNATS.

From: Wolfgang Solfrank <Wolfgang%Solfrank.net@localhost>
To: Manuel Bouyer <bouyer%antioche.eu.org@localhost>
Cc: Elad Efrat <elad%NetBSD.org@localhost>, gnats-bugs%NetBSD.org@localhost, 
 tech-kern%NetBSD.org@localhost
Subject: Re: kern/29360: vfs.generic.usermount and mount(8) general questions
Date: Mon, 07 Sep 2009 13:05:59 +0200

 Hi,
 
 > Yes, vfs.generic.usermount was introduced later, because of security issues
 > that usermounts could cause. AFAIK the know security issues with
 > usermounts are fixed, but still it's better to have it disabled on systems
 > where it's not needed.
 
 The main reason for not allowing user mounts by default is that it's
 quite easy to make a system panic by mounting some (more or less) carefully
 crafted media.
 
 Ciao,
 Wolfgang
 -- 
 Wolfgang%Solfrank.net@localhost                                Wolfgang 
Solfrank