Re: kern/54947: chroot mount file systems leak the actual path in superblock

[coypu%sdf.org@localhost]

The following reply was made to PR kern/54947; it has been noted by GNATS.

From: coypu%sdf.org@localhost
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: kern/54947: chroot mount file systems leak the actual path in
 superblock
Date: Sun, 9 Feb 2020 16:24:44 +0000

 It's worth noting that if you can mount a filesystem, you can likely
 perform raw writes to the underlying block.
 
 e.g. write malicious.kmod somewhere in /stand, and open a matching
 device in /dev, causing your malicious module to be loaded.