Re: Fwd: Multiple vendor 'Taylor UUCP' problems.

From

Andrey A. Chernov <ache@nagual.pp.ru>

Date

8 Sep 2001 19:21:55

Subject

Re: Fwd: Multiple vendor 'Taylor UUCP' problems.

Message-ID

20010909062025.B34828@nagual.pp.ru

In reply to

Kris Kennaway, Kris Kennaway (freebsd-security)

References to

Kris Kennaway (freebsd-security) , Kris Kennaway (freebsd-security) , Kris Kennaway, Kris Kennaway (freebsd-security) , Andrey A. Chernov, Andrey A. Chernov (freebsd-security) , Kris Kennaway, Kris Kennaway (freebsd-security) , Todd C. Miller, Todd C. Miller (freebsd-security) , Andrey A. Chernov, Andrey A. Chernov (freebsd-security) , Kris Kennaway, Kris Kennaway (freebsd-security) , Andrey A. Chernov, Andrey A. Chernov (freebsd-security) , Kris Kennaway, Kris Kennaway (freebsd-security)

Referenced by

Kris Kennaway, Kris Kennaway (freebsd-security) , Matt Dillon, Matt Dillon (freebsd-security)

[ Hide this part ]

On Sat, Sep 08, 2001 at 19:10:13 -0700, Kris Kennaway wrote:
> Actually, I think I was overstating a bit.  You can't set UFS file
> flags on an NFS volume, but they should work fine if already set on
> the server and /usr is mounted by a client.
>
> What will break is trying to do an installworld onto a remote NFS
> volume, or installworld within a jail, since in order for that to
> succeed you have to tell it not to set file flags, and that will leave
> you with a local root exploit on the installed system.
 
This is different problem we already have in other places, since we
install f.e. libc, sliplogin, login, chpass, etc. etc. with -fschg
 
It means no remote NFS installation allowed.
 
--
Andrey A. Chernov
http://ache.pp.ru/

[ Show this part (application/pgp-signature) ]