d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

- Loudly disallow MNT_SUIDDIR mount flag for unprivileged users mounts.

Browse Source 
- Style fixed.

Submitted by:	bde
This commit is contained in:
Pawel Jakub Dawidek 2004-03-27 08:09:00 +00:00
parent c3e741f776
commit 6c8cc8ec4b
1 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
sys/kern/vfs_mount.c
View File

@ -686,22 +686,21 @@ vfs_domount(
if (error)
return (error);
}
/*
* Do not allow NFS export by non-root users.
* Do not allow NFS export or MNT_SUIDDIR by unprivileged users.
*/
if (fsflags & MNT_EXPORTED) {
if (fsflags & (MNT_EXPORTED | MNT_SUIDDIR)) {
error = suser(td);
if (error)
return (error);
}
/*
* Silently enforce MNT_NOSUID, MNT_NODEV and MNT_USER
* for unprivileged users and remove MNT_SUIDDIR.
* Silently enforce MNT_NODEV, MNT_NOSUID and MNT_USER for
* unprivileged users.
*/
if (suser(td)) {
fsflags &= ~MNT_SUIDDIR;
fsflags |= MNT_NOSUID | MNT_NODEV | MNT_USER;
}
if (suser(td) != 0)
fsflags |= MNT_NODEV | MNT_NOSUID | MNT_USER;
/*
* Get vnode to be covered
*/