Vulnerability Development mailing list archives

Re: mount


From: <bugtraq () seifried org>
Date: Sat, 29 Dec 2001 11:00:36 -0700 (MST)

This is a "feature" I suppose. I don't see why mounting should be 
disallowed on directories that contain items (dev's, files, dir's, etc.). 
In fact it is quite useful. You can for example create a "stub" /etc/ dir 
(with fstab, stripped passwd, and so on) that contains just enough for 
initial boot then the system can mount say /dev/hda5 as /etc (preventing 
symlink attacks, partition filling issues, etc.). 

-Kurt Seifried


Current thread: