4 ms·
It feels surprising to me that a Linux system can be bricked or rooted by a maliciously constructed filesystem and this is not considered a major bug. Surely th
by JulianMorrison 7y ago
It feels surprising to me that a Linux system can be bricked or rooted by a maliciously constructed filesystem and this is not considered a major bug. Surely this is an obvious attack vector? (Dropped USB sticks, etc.)
- londons_explore 7y agoIt's a pretty good argument for FUSE-stye userspace filesystems. Then the code reading the filesystem need not have any more permissions than the user mounting it.
- JulianMorrison 7y agoThat might prevent privilege escalation but I'm not sure it prevents a kernel wedge.
- catern 7y agoIf you can wedge the kernel with a FUSE filesystem, that is certainly a severe bug, because it means an unprivileged user is able to DOS the system for everyone.
- imglorp 7y agoHURD has it also. https://www.gnu.org/software/hurd/hurd/documentation/translators.html https://www.gnu.org/software/hurd/hurd/documentation/transla...
- rwmj 7y agoIt's the reason libguestfs exists.
- fh973 7y ago... or block storage systems in container environments, where the user somehow has write access to the block device.
- JulianMorrison 7y agoAren't those the usual way to provision some databases?
- int0x80 7y agoOne argument is that allowing non-root to mount(2) is already a big security problem.