hardening patch for setuid code
Bug #1020904 reported by
Marcus Meissner
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
eCryptfs |
Fix Released
|
High
|
Tyler Hicks | ||
ecryptfs-utils (openSUSE) |
Won't Fix
|
High
|
Bug Description
Sebastian Krahmer audited and hardened the setuid related code in ecryptfs-utils
most fixes are in pam_ecryptfs, some smaller ones in mount.ecryptfs_
Changed in ecryptfs-utils (openSUSE): | |
importance: | Unknown → High |
status: | Unknown → Confirmed |
Changed in ecryptfs-utils (openSUSE): | |
status: | Confirmed → Incomplete |
Changed in ecryptfs-utils (openSUSE): | |
status: | Incomplete → Won't Fix |
To post a comment you must log in.
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
See thread: http:// forums. opensuse. org/english/ other-forums/ development/ programming- scripting/ 408976- ecryptfs- setup-private- script- fails.html
There are 2 problems:
1. User has not the permission to mount - fix: setuid root for /sbin/mount. ecryptfs_ private
2. Kernel modules are not loaded automatically. Needs ecryptfs and dependend modules
Reproducible: Always
Steps to Reproduce: mount-private
ecryptfs-
Actual Results:
error
Expected Results:
working