Re: mounting loopback as non-root user

From: Paul Morgan (paulswm_at_earthlink.net)
Date: 12/30/03

  • Next message: Ramasubramanian Ramesh: "Re: Using RAID chipsets in the motherboard." 
    To: debian-user@lists.debian.org
Date: Tue, 30 Dec 2003 14:35:55 -0500

    On Wed, 31 Dec 2003 03:05:48 +0900, B. L. Jilek wrote:

    > Hi Rob!
    >
    > On Tue, 30 Dec 2003, Rob Benton wrote:
    >
    >> I guess I've never payed much attention to this until today but you have
    >> to be root to mount with the -o loop option. At least on my machine I
    >> do. Mount has the suid bit set. Is there some way I can allow non-root
    >> users to mount loop devices?
    >
    > You could try using 'sudo'.
    >

    So you allow a user access to mount (and losetup?) via sudo, the user
    immediately mounts an fs image containing a suid binary on a loop device
    and whammo, there goes your system. 

    -- 
....................paul
It's working as coded.
-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Ramasubramanian Ramesh: "Re: Using RAID chipsets in the motherboard."

    Relevant Pages