Re: [Security-Discuss] Mount issues in LE2005-Club - Security Issue

Stew,

It would appear that you can successfully remount /tmp with 
nosuid,noexec,nodev options very easily (I can also duplicate this).  
But my issue is with what occurs during a full Cold Boot (or init 6).

This is the exception where I cannot get mount to use the options in 
/etc/fstab.  Can you duplicate this?  Or did you simply use the remount 
option for /tmp?

Stew Benedict wrote:

>I'm not seeing the problem:
>
>[root@presario30 ~]# cat /proc/version 
>Linux version 2.6.11-12mdk (qateam-x6Fv9fcoW1bipkQsPoWDGFaTQe2KTcn/@public.gmane.org) (gcc version 
>3.4.3 (Mandrakelinux 10.2 3.4.3-7mdk)) #1 Mon Jun 27 23:18:37 MDT 2005
>[root@presario30 ~]# rpm -q mount
>mount-2.12a-12mdk
>[root@presario30 ~]# cat /etc/mandrake-release 
>Mandrakelinux release 10.2 (Limited Edition 2005) for i586
>
>[root@presario30 ~]# grep tmp /etc/fstab
>/dev/hda21 /tmp ext3 nosuid,noexec,nodev 1 2
>[root@presario30 ~]# mount | grep tmp
>/dev/hda21 on /tmp type ext3 (rw,noexec,nosuid,nodev)
>
>[root@presario30 ~]# cp /bin/ls /tmp
>[root@presario30 ~]# /tmp/ls
>-bash: /tmp/ls: Permission denied
>
>[root@presario30 ~]# ls -l /usr/bin/sudo
>---s--x--x  2 root root 101748 Jun 21 12:29 /usr/bin/sudo*
>[root@presario30 ~]# cp -av /usr/bin/sudo /tmp
>`/usr/bin/sudo' -> `/tmp/sudo'
>[root@presario30 ~]# ls -l /tmp/sudo
>---s--x--x  1 root root 101748 Jun 21 12:29 /tmp/sudo*
>[root@presario30 ~]# /tmp/sudo 
>-bash: /tmp/sudo: Permission denied
>
>[root@presario30 ~]# cd /tmp
>[root@presario30 tmp]# mknod hdc b 22 0
>[root@presario30 tmp]# mount hdc /mnt/cdrom
>mount: block device hdc is write-protected, mounting read-only
>mount: cannot mount block device hdc read-only
>
>If I remove the "nodev" and remount:
>
>[root@presario30 tmp]# grep tmp /etc/fstab
>/dev/hda21 /tmp ext3 nosuid,noexec 1 2
>
>[root@presario30 tmp]# mount | grep tmp
>/dev/hda21 on /tmp type ext3 (rw,noexec,nosuid)
>
>[root@presario30 ~]# mount -oremount /tmp
>[root@presario30 ~]# cd /tmp
>[root@presario30 tmp]# mount hdc /mnt/cdrom
>mount: block device hdc is write-protected, mounting read-only
>
>
>  
>
>------------------------------------------------------------------------
>
>____________________________________________________
>Want to buy your Pack or Services from Mandriva? 
>Go to http://store.mandriva.com
>Join the Club : http://www.mandrivaclub.com
>____________________________________________________
>  
>


-- 
Albert E. Whale, CHS CISA CISSP
Sr. Security, Network, Risk Assessment and Systems Consultant
-------------------------------------------------------------------
ABS Computer Technology, Inc. - www.ABS-CompTech.com
SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops Here.
President of the Pittsburgh InfraGard Alliance

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________