18 Oct
2007
18 Oct
'07
2:16 a.m.
On Wed, 2007-10-17 at 22:01 +0100, Chris G wrote:
There are a few references to this if you do a Google search.
It turns out that the easy way to get it to work is to set the SUID bit on /sbin/mount.cifs and /sbin/umount.cifs, it now works for me.
Does that not leave the system quite vulnerable ?
If you suid mount commands couldn't I (as a user) now copy /etc to a cifs share someplace, change passwd and then mount it back over your /etc to gain root ?
Or am I missing something that would prevent that from working ?