Subject: Re: kern/7129: normal user can bypass mount 'noexec' flags
To: Bill Studenmund <wrstuden@nas.nasa.gov>
From: Thor Lancelot Simon <tls@rek.tjls.com>
List: tech-security
Date: 03/11/1999 18:50:44
On Thu, Mar 11, 1999 at 03:11:59PM -0800, Bill Studenmund wrote:
> On Thu, 11 Mar 1999, Jason Thorpe wrote:
> 
> > On Thu, 11 Mar 1999 20:47:19 +0100 
> >  Manuel Bouyer <bouyer@antioche.lip6.fr> wrote:
> > 
> >  > And they will be back if a MNT_UPDATE is done on the lower FS.
> >  > We need a way to track flags that have been deleted by a update. 
> > 
> > You could have the top layer look at the bottom layer's mount flags
> > when a vfs or vn op happens...
> 
> I think that's a bad idea. Checking each op will be expensive, given that
> flag changes are rare. Also, there's the problem that I think the idea of
> a root nullfs mount which has fewer restrictions than the layer on which
> it's loaded is reasonable (If root wants to hang him/herself, ok :-)

I do not.

Limiting how much damage root can do is *precisely the purpose* of some of
the mount flags we're talking about, at least the way I see it.

Thor