Package: fuse-utils Version: 2.2-3 Severity: critical Tags: security
On unmount, fusermount doesn't reset the permissions on the new /etc/mtab. It ends up having the permissions given in the user's umask, and belonging to the user's group. This is fixed in upstream CVS.
[mount ~/mnt with any fuse filesystem] $ umask 000 $ ls -l /etc/mtab -rw-r--r-- 1 root root 419 2005-03-13 12:23 /etc/mtab $ fusermount -u ~/mnt $ ls -l /etc/mtab -rw-rw-rw- 1 root timothy 358 2005-03-13 12:23 /etc/mtab
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
