Timeline for Is the mount manpage saying nosuid *is* secure, or is *not*?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 14, 2012 at 20:04 | vote | accept | kojiro | ||
| Sep 11, 2012 at 22:42 | comment | added | jlliagre | If current distributions of suidperl no more allow bypassing the nosuid flag, the man page comment are just obsolete. | |
| Sep 11, 2012 at 21:22 | comment | added | kojiro |
I would understand if they had just said that. But suidperl is tangential, right? If you manage to install any suid interpreter you can use it to run a script as root. That's true whether or not the filesystem is mounted nosuid, so nosuid is not *rather unsafe`.
|
|
| Sep 11, 2012 at 21:05 | history | answered | jlliagre | CC BY-SA 3.0 |