On Wed, 31 Dec 2003 03:05:48 +0900, B. L. Jilek wrote:

> Hi Rob!
> 
> On Tue, 30 Dec 2003, Rob Benton wrote:
> 
>> I guess I've never payed much attention to this until today but you have
>> to be root to mount with the -o loop option.  At least on my machine I
>> do.  Mount has the suid bit set.  Is there some way I can allow non-root
>> users to mount loop devices?
> 
> You could try using 'sudo'.
> 

So you allow a user access to mount (and losetup?) via sudo, the user
immediately mounts an fs image containing a suid binary on a loop device
and whammo, there goes your system.

-- 
....................paul

It's working as coded.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to