[Security-Discuss] Mount issues in LE2005-Club - Security Issue

Albert Whale <[email protected]> Sun, 28 Aug 2005 10:37:54 -0400
Newsgroups gmane.linux.mandrake.security.general
Organization ABS Computer Technology, Inc.
Message-ID <[email protected]>
I've just noticed a problem with the mount command on:
Mandrakelinux release 10.2 (Limited Edition 2005) for i586

The issue is with the /tmp filesystem.  I have selected the following
options to secure the mounting of /tmp:
grep tmp /etc/fstab
/dev/sdb1 /tmp ext3 nosuid,noexec,nodev 1 2

However when I examine the options on the mounted filesystem, they
appear to not have been applied
mount | grep tmp
/dev/sdb1 on /tmp type ext3 (rw)

Has anyone else experienced this?

This works as advertised on all other versions of Mandrake.  Is there an
update for this?  This is a significant attack vector for many Hackers
on a Global Basis.  Can we please get this fixed?

-- 
Albert E. Whale, CHS CISA CISSP
Sr. Security, Network, Risk Assessment and Systems Consultant
-------------------------------------------------------------------
ABS Computer Technology, Inc. - www.ABS-CompTech.com
SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops Here.
President of the Pittsburgh InfraGard Alliance
message.footer (text/plain, 232 B)
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________