diff options
author | Colin Percival <cperciva@FreeBSD.org> | 2010-05-27 03:15:04 +0000 |
---|---|---|
committer | Colin Percival <cperciva@FreeBSD.org> | 2010-05-27 03:15:04 +0000 |
commit | 31b99bfe49cfb0820286cb7a3613dbc2f612208c (patch) | |
tree | 7cf18b9e591640da6a05e682c0c6b4207a65a1fa /lib | |
parent | f3e1e28bcceee1db82372dcd342c9a53783d88b3 (diff) | |
download | src-31b99bfe49cfb0820286cb7a3613dbc2f612208c.tar.gz src-31b99bfe49cfb0820286cb7a3613dbc2f612208c.zip |
Change the current working directory to be inside the jail created by
the jail(8) command. [10:04]
Fix a one-NUL-byte buffer overflow in libopie. [10:05]
Correctly sanity-check a buffer length in nfs mount. [10:06]
Approved by: so (cperciva)
Approved by: re (kensmith)
Security: FreeBSD-SA-10:04.jail
Security: FreeBSD-SA-10:05.opie
Security: FreeBSD-SA-10:06.nfsclient
Notes
Notes:
svn path=/stable/8/; revision=208586
Diffstat (limited to 'lib')
-rw-r--r-- | lib/libc/sys/mount.2 | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/lib/libc/sys/mount.2 b/lib/libc/sys/mount.2 index 6ce2d4d2fa74..3d48f4110fce 100644 --- a/lib/libc/sys/mount.2 +++ b/lib/libc/sys/mount.2 @@ -107,7 +107,7 @@ This restriction can be removed by setting the .Va vfs.usermount .Xr sysctl 8 variable -to a non-zero value. +to a non-zero value; see the BUGS section for more information. .Pp The following .Fa flags @@ -370,3 +370,10 @@ functions appeared in .At v6 . .Sh BUGS Some of the error codes need translation to more obvious messages. +.Pp +Allowing untrusted users to mount arbitrary media, e.g. by enabling +.Va vfs.usermount , +should not be considered safe. +Most file systems in +.Fx +were not built to safeguard against malicious devices. |