Re: SECURITY PROBLEM: autofs [all versions]
Erik wrote:
>
> On Fri, Jun 30, 2000 at 09:56:45PM -0700, Alvin Oga wrote:
> >
> > hi christopher...
> >
> > anytime someone has physical access to the machine...
> > you already have a security problem.... ( my definition )
> >
[...]
> That was the problem discussed with MBR awhile back, that it gave the
> option of booting from something else anyways, but that, like this is
> considered something the admin should be informed of, but not done
> for them(i guess this might get done).
Anything involved in the boot process should be able to handle security
problems of this nature. If MBR does not handle security, it is flawed
by design, not by error.
Autofs has nothing to do with booting and is flawed by configuration.
Changing one line will fix the problem for the floppy. The entry for
/dev/hdd and /dev/cdrom should be changed similarly. The proper way to
configure it is already documented: `grep floppy /etc/fstab` (unless I
changed it, but I don't think so).
Christopher
Reply to: