Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I'm a bit confused about the description of nosuid in the mount manpage on this RedHat system I'm setting up:

nosuid Do not allow set-user-identifier or set-group-identifier bits to
       take  effect.  (This seems safe, but is in fact rather unsafe if
       you have suidperl(1) installed.)

So I looked up suidperl(1) and discovered The suidperl Story, and was properly entertained for five minutes. I also learned that setting nosuid may not improve security as much as one might like, but I'm back to wondering how nosuid decreases the overall security, compared to not using it.

share|improve this question

1 Answer

up vote 1 down vote accepted

As far as I understand, (I'm not using perl and even less suidperl), the manpage doesn't says nosuid is less secure, just that despite being more secure at first sight, it can be easily defeated by suidperl.

share|improve this answer
I would understand if they had just said that. But suidperl is tangential, right? If you manage to install any suid interpreter you can use it to run a script as root. That's true whether or not the filesystem is mounted nosuid, so nosuid is not *rather unsafe`. – kojiro Sep 11 '12 at 21:22
If current distributions of suidperl no more allow bypassing the nosuid flag, the man page comment are just obsolete. – jlliagre Sep 11 '12 at 22:42

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.