home *** CD-ROM | disk | FTP | other *** search
/ NetNews Usenet Archive 1992 #26 / NN_1992_26.iso / spool / comp / security / misc / 1656 < prev    next >
Encoding:
Internet Message Format  |  1992-11-06  |  1.6 KB
  1. Xref: sparky comp.security.misc:1656 comp.unix.wizards:4550
  2. Path: sparky!uunet!charon.amdahl.com!pacbell.com!ames!saimiri.primate.wisc.edu!zaphod.mps.ohio-state.edu!sol.ctr.columbia.edu!emory!europa.asd.contel.com!paladin.american.edu!news.univie.ac.at!blekul11!frmop11!barilvm!bimacs!yedidya
  3. From: yedidya@bimacs.BITNET (Yedidya Israel)
  4. Newsgroups: comp.security.misc,comp.unix.wizards
  5. Subject: Re: Setuid script - is this unsecure?
  6. Message-ID: <4433@bimacs.BITNET>
  7. Date: 5 Nov 92 19:10:55 GMT
  8. References: <1d6fdiINNf5q@bnsgd245.bnr.co.uk>
  9. Organization: Math department, Bar-Ilan University, Ramat-Gan, ISRAEL
  10. Lines: 24
  11.  
  12. In article <1d6fdiINNf5q@bnsgd245.bnr.co.uk> rickt@bnr.co.uk (Rick Tait) writes:
  13. >I recently installed these shell scripts on my machine (on which I am root),
  14. >and I'd like to know if I'm compromising it's security. Basically, they
  15. >just allow the users to mount/umount/eject the floppy disk (pcfs).
  16.  
  17. Did anyone tried to solve this old problem with automounter ?
  18. Something like (with amd)
  19.  
  20. pcfs            host==sunblast;type:=program;\
  21.                 mount:="/usr/etc/mount_pcfs mount_pcfs /dev/fd0 /amd.direct/pcfs nosuid";\
  22.                 unmount:="/etc/umount umount /dev/fd0"
  23.  
  24. I get the following message:
  25.  
  26. Nov  5 21:09:22 sunblast amd[126]/error: /amd.direct/pcfs: mount
  27. (afs_cont): Not owner
  28.  
  29. --
  30. Israel Yedidya,         Phone:  972-3-5318682 or 972-3-5318407/8
  31. System Administrator,   Fax:    972-3-5353325
  32. Math & CS Department,   Email:  yedidya@bimacs.cs.biu.ac.il
  33. Bar-Ilan University,    Bitnet: yedidya@bimacs
  34. Ramat-Gan, ISRAEL.      Uucp:   ...!uunet!pucc.princeton.edu!bimacs!yedidya
  35. If someone proves there is no God, I'll stop being religious!
  36.