Re: SECURITY PROBLEM: autofs [all versions]
> "nosuid,nodev" and as such anyone with a floppy disk and physical access
> to a floppy drive may become root on that machine.
Give a local user physical access to the floppy drive, and he'll just
reboot the machine with a rescue floppy in the floppy drive if he wants
root. Same with the CD drive, or zip disks.
I'm not sure this is release-critical, but I'll defer to the release
manager to figure it out.
Will
--------------------------------------------------------------------------
| harpo@udel.edu lowe@cis.udel.edu lowe@debian.org lowe@asel.udel.edu |
| http://www.cis.udel.edu/~lowe/ |
| PGP Public Key: http://www.cis.udel.edu/~lowe/index.html#pgpkey |
--------------------------------------------------------------------------
Reply to: