pool/ecryptfs-utils
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- also supply MS_NODEV to avoid exposing device files

Browse Source 
if someone got them on the encrypted media.

OBS-URL: https://build.opensuse.org/package/show/security/ecryptfs-utils?expand=0&rev=44
This commit is contained in:
Marcus Meissner 2012-07-11 11:48:48 +00:00 committed by Git OBS Bridge
parent 1159255a51
commit e7bc56b1cd
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ecryptfs-utils.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Jul 11 11:48:24 UTC 2012 - meissner@suse.com
- also supply MS_NODEV to avoid exposing device files
if someone got them on the encrypted media.
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Jul 10 14:03:27 UTC 2012 - meissner@suse.com Tue Jul 10 14:03:27 UTC 2012 - meissner@suse.com

2
ecryptfs-utils.security.patch
View File

@ -256,7 +256,7 @@ Index: ecryptfs-utils-96/src/utils/mount.ecryptfs_private.c
} }
/* Perform mount */ /* Perform mount */
- if (mount(src, ".", FSTYPE, 0, opt) == 0) { - if (mount(src, ".", FSTYPE, 0, opt) == 0) {
+ if (mount(src, ".", FSTYPE, MS_NOSUID, opt) == 0) { + if (mount(src, ".", FSTYPE, MS_NOSUID|MS_NODEV, opt) == 0) {
if (update_mtab(src, dest, opt) != 0) { if (update_mtab(src, dest, opt) != 0) {
goto fail; goto fail;
} }