Bug#417995: initramfs-tools: lets ordinary users read the root filesystem's raw block device

[Goswin von Brederlow <brederlo@informatik.uni-tuebingen.de>]

Steve Langasek <vorlon@debian.org> writes:

> On Fri, Apr 06, 2007 at 01:39:35AM +0200, Fabian Pietsch wrote:
>> --- /usr/share/initramfs-tools/scripts/functions.orig
>> +++ /usr/share/initramfs-tools/scripts/functions
>> @@ -231,6 +231,7 @@
>>  		;;
>>  	esac
>>  
>>  	mknod /dev/root b ${major} ${minor}
>> +	chmod go-rw /dev/root
>>  	ROOT=/dev/root
>>  }
>
> This looks like an appropriate fix to me.
>
> Cheers,

Wouldn't it be better to set the mode instead of alter it? What if the
next mknod decides to not give r permissions on /dev/root or
something? Just seems more robust to chmod to 0400 or 0600.

MfG
        Goswin