Re: [Security-Discuss] Mount issues in LE2005-Club - Security Issue

Am Sonntag, 28. August 2005 16:37 schrieb Albert Whale:
> I've just noticed a problem with the mount command on:
> Mandrakelinux release 10.2 (Limited Edition 2005) for i586
>
> The issue is with the /tmp filesystem.  I have selected the following
> options to secure the mounting of /tmp:
> grep tmp /etc/fstab
> /dev/sdb1 /tmp ext3 nosuid,noexec,nodev 1 2
>
> However when I examine the options on the mounted filesystem, they
> appear to not have been applied
> mount | grep tmp
> /dev/sdb1 on /tmp type ext3 (rw)

Hint

mount shows you the information from /etc/mtab which may not be up to date.
PLZ also check "cat /proc/mounts".
The mtab must be updated after a cold boot. The init scripts are responsible 
for this. Plz check

rpm --verify initscripts

if something was modified. Get inspired on how fstab is handled during 
boot: /etc/rc.d/rc.sysinit


chris

>
> Has anyone else experienced this?

Something similar. Old mtab was the source of odd behaviour.

>
> This works as advertised on all other versions of Mandrake.  Is there an
> update for this?  This is a significant attack vector for many Hackers
> on a Global Basis.  Can we please get this fixed?

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________