Re: SECURITY PROBLEM: autofs [all versions]

["Christopher W. Curtis" <ccurtis@aet-usa.com>]

Will Lowe wrote:
> 
> > "nosuid,nodev" and as such anyone with a floppy disk and physical access
> > to a floppy drive may become root on that machine.
> 
> Give a local user physical access to the floppy drive, and he'll just
> reboot the machine with a rescue floppy in the floppy drive if he wants
> root. Same with the CD drive, or zip disks.

A) There are BIOS restrictions to prevent this.
b) These can only be circumvented by pulling the machine apart.
3) People will notice a machine going down.
IV) It's an easy fix.

Christopher