incorrect /mnt permissions - potential security issue

This project has moved to github - see https://github.com/freenas

Brought to you by: cochard, mattolander

This project can now be found here.

#674 incorrect /mnt permissions - potential security issue

Milestone: v0.7

Status: open

Owner: Olivier Cochard-Labbe

Labels: Users and groups (27)

Priority: 5

Updated: 2012-10-28

Created: 2009-09-14

Creator: Kevin Darbyshire-Bryant

Private: No

Running 0.7RC2 Khasadar (revision 4888) i386 embedded. I'm testing using SSH/SCP/SFTP to access system. During testing I noticed default permissions of /mnt are 777 (root, wheel), filesystem mounts are 775 with (Root,Wheel) ownership.

What bothers me is that as a normal SSH/SCP/SFTP user I could fill root filesystem and bring the system down.

I believe /mnt be 775 permissions instead?

Discussion

Daisuke Aoyama - 2010-02-12

I agree this. I don't know a historical reason. but the mount point (/mnt) should be 755.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

incorrect /mnt permissions - potential security issue

This project has moved to github - see https://github.com/freenas

Group

Searches

Help

#674 incorrect /mnt permissions - potential security issue

Discussion