[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#717544: CVE-2013-2207: pt_chown



reopen 717544
kthxbye

This isn't done, actually.  After breaking several systems of my own
and fellow developers turning it off in Ubuntu very briefly, I flipped
it back on.

This needs some solid thought on how we can prevent users from shooting
themselves in the foot, since the default mount options for /dev/pts
and /dev/ptmx break running systems *and* people are used to doing
things like "mount -t devpts devpts-foo chroot-foo/dev/pts", which will
update the mount options for the system devpts as well.

I think the sanest approach would be to hardcode the defaults into
mount itself (which I plan to do when I get the round tuits), and maybe
even suggest a default in the kernel as well, and then push the mount
and glibc changes together, especially if we intend to backport this
to stable releases.

... Adam


Reply to: