oss-sec mailing list archives

Re: Re: ecryptfs headsup

From: Tyler Hicks <tyhicks () canonical com>
Date: Wed, 11 Jul 2012 12:29:52 -0700

On 2012-07-11 10:48:48, Kurt Seifried wrote:

So it sounds like a non privileged user on an Ubuntu machine can
insert a USB stick/etc with a file system that gets automatically
mounted, said file system can contain setuid root binaries for example
which the user can then execute, elevating privileges?


Correct, but it isn't limited to Ubuntu. I believe that other distros
ship /sbin/mount.ecryptfs_private as setuid-root, too.

Tyler

Attachment: signature.asc
Description: Digital signature

Current thread:

ecryptfs headsup Sebastian Krahmer (Jul 10)
- Re: ecryptfs headsup Kurt Seifried (Jul 10)
  - Re: ecryptfs headsup Sebastian Krahmer (Jul 10)
    - Re: ecryptfs headsup Marcus Meissner (Jul 10)
    - Re: ecryptfs headsup Dan Rosenberg (Jul 10)
    - Re: ecryptfs headsup Tyler Hicks (Jul 10)
    - Re: ecryptfs headsup Tyler Hicks (Jul 10)
    - Re: ecryptfs headsup Dustin Kirkland (Jul 11)
    - Re: ecryptfs headsup Kurt Seifried (Jul 11)
    - Re: Re: ecryptfs headsup Tyler Hicks (Jul 11)
    - Re: Re: ecryptfs headsup Kurt Seifried (Jul 11)
    - Re: Re: ecryptfs headsup Tyler Hicks (Jul 11)
    - Re: Re: ecryptfs headsup Dustin Kirkland (Jul 13)
    - Re: Re: ecryptfs headsup Jason A. Donenfeld (Jul 13)
    - Re: Re: ecryptfs headsup Jason A. Donenfeld (Jul 14)
    - Re: Re: ecryptfs headsup Sebastian Krahmer (Jul 16)
    - Re: Re: ecryptfs headsup Justin Ossevoort (Jul 16)