Re: [Security-Discuss] Mount issues in LE2005-Club - Security Issue

Frederik Himpe <[email protected]> Sun, 28 Aug 2005 16:54:10 +0200
Newsgroups gmane.linux.mandrake.security.general
Message-ID <[email protected]>
On zo, 2005-08-28 at 10:37 -0400, Albert Whale wrote:
> I've just noticed a problem with the mount command on:
> Mandrakelinux release 10.2 (Limited Edition 2005) for i586
> 
> The issue is with the /tmp filesystem.  I have selected the following
> options to secure the mounting of /tmp:
> grep tmp /etc/fstab
> /dev/sdb1 /tmp ext3 nosuid,noexec,nodev 1 2
> 
> However when I examine the options on the mounted filesystem, they
> appear to not have been applied
> mount | grep tmp
> /dev/sdb1 on /tmp type ext3 (rw)

Have you actually tested if the partition is really mounted with the
exec option then? In my experience, the mount command does not seem to
always show the used mount options (e.g. I remember having seen this
already with uid and gid options for smbfs mounts, on another distro,
even though they are correctly working).

-- 
Frederik Himpe
message.footer (text/plain, 232 B)
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________