Re: SECURITY PROBLEM: autofs [all versions]
Alvin Oga wrote:
> anytime someone has physical access to the machine...
> you already have a security problem.... ( my definition )
Fine definition. Not all computers are locked up, however, and if there
is a huge room with only remote access allowed, there are often trust
relationships setup that can be exploited.
> i am not sure that you can get physical access as root
> from the options shown in /etc/auto.misc.... but if oyu
> are correct....wow...wonder how many people tried it...
> and only now surfaces ???
I've done it. Try it. I tried to confirm w/others on IRC, but nobody
had autofs installed.
> I always disable those "system defined options" anyway...
> and use my own automated servers:/directories
>
> there was lots of discussion the past couple weeks of what
> needs to be in /etc/auto.master and /etc/auto.misc
> and automaps from NIS and which to read first and functions
> supported or not...
> - newest supported feature is ldap in autofs
I've not gotten around to setting up LDAP, but I don't want my NIS to
distribute security holes to all the client machines.
Chris
Reply to: