Re: mounting loopback as non-root user
On Wed, 31 Dec 2003 03:05:48 +0900, B. L. Jilek wrote:
> Hi Rob!
>
> On Tue, 30 Dec 2003, Rob Benton wrote:
>
>> I guess I've never payed much attention to this until today but you have
>> to be root to mount with the -o loop option. At least on my machine I
>> do. Mount has the suid bit set. Is there some way I can allow non-root
>> users to mount loop devices?
>
> You could try using 'sudo'.
>
So you allow a user access to mount (and losetup?) via sudo, the user
immediately mounts an fs image containing a suid binary on a loop device
and whammo, there goes your system.
--
....................paul
It's working as coded.
Reply to: