Bug#561640: root directory has mode rwxrwxrwt

2009-12-22 Thread Stefanos Harhalakis
On Tuesday 22 of December 2009, Phil Vandry wrote: > On Tue, 22 Dec 2009 16:04:24 +0200, Harhalakis Stefanos wrote: > > > $ ls -ld / > > > drwxrwxrwt 7 root root 160 2009-12-18 21:40 . > > > > This does not seem easy to exploit because of the sticky bit. No? > > You're right. The problem is less s

Bug#561640: root directory has mode rwxrwxrwt

2009-12-22 Thread Phil Vandry
On Tue, 22 Dec 2009 16:04:24 +0200, Harhalakis Stefanos wrote: > > $ ls -ld / > > drwxrwxrwt 7 root root 160 2009-12-18 21:40 . > > This does not seem easy to exploit because of the sticky bit. No? You're right. The problem is less serious because of the sticky bit. One way that you could still

Bug#561640: root directory has mode rwxrwxrwt

2009-12-22 Thread Harhalakis Stefanos
Hello, On Saturday 19 of December 2009, Phil Vandry wrote: > fsprotect mounts an aufs filesystem composed of: > 1. a tmpfs > 2. the original underlying file system Thanks for reporting that. Indeed it's a bug. I'll try to fix this in the next version. > This is particularily alarming when f

Bug#561640: root directory has mode rwxrwxrwt

2009-12-18 Thread Phil Vandry
Package: fsprotect Version: 1.0.4 Severity: grave Tags: security fsprotect mounts an aufs filesystem composed of: 1. a tmpfs 2. the original underlying file system The union filesystem should initially be identical to the original underlying filesystem and diverge slowly as changes are made.