Bug#299007: base-files: Insecure PATH
A little while ago I wrote:
> (A partial solution would be to mount nosuid. Another part would require a
> squash-gid-on-mount option: mount has no such options for NFS, though has
> similar options for some other filesystems; there are also uid/gid mapping
> options for NFS exports.)
Re-reading, I see it makes no sense (I do not know what I was thinking at
the time). Mounting nosuid may be sensible (but suid is often wanted);
there is no protection against users (including those in group staff) being
trojaned e.g. via their .bashrc files.
Cheers,
Paul Szabo psz@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia
Reply to: