nosuid on Solaris 8


 
Thread Tools Search this Thread
Operating Systems Solaris nosuid on Solaris 8
# 1  
Old 05-17-2007
nosuid on Solaris 8

Hi,

Can anyone help on the following

"Mount file system as “nosuid” to prevent accidental and unauthorised execution of software especially Setuid utility"

Question
1) Does this refer only to local mount or remote mount or both
2) What exactly nosuid mean .
3) How does it impact , if the mount point are running application , script
4) My servers mounted file system has the following usage
a)mount point that run application
b) mount point that use as storage for files ,it share out for others servers
to access
So , if I add in the option "nosuid" , does it affect point a) and b).

Regards
# 2  
Old 05-17-2007
nosuid is a combination of nosetuid and nodevices which are separate options. To understand these options you need to know what the suid bit does and what a device file is. If you don't understand the suid bit, see, Unix File Permissions. A device file is normally found in the /dev directory and it allows access to devices such as disk drives.

Now imagine a non-root user (named, say, joe) who mounts a cd on the system. That cd could have a suid program, owned by root, and executable by joe. Now joe has root power. Or suppose it had a file something like /dev/mem but writable by joe. Now joe can scribble in memory and cause the box to panic. To prevent joe from obtaining enough power to compromise the system, we must prevent joe from mounting cd's with device files or suid programs. That is where the nosuid option comes in.

In addition to mounting removable media, a similiar problem arises from mounting NFS file systems, which may not be under the control of the local admin. nosuid, nosetuid, and nodevices would not usually be used on ordinary local disks. Just removable media and NFS filesystems.
Login or Register to Ask a Question

Previous Thread | Next Thread

4 More Discussions You Might Find Interesting

1. Solaris

Patching Procedure in Solaris 10 with sun cluster having Solaris zone

Hi Gurus I am not able to find the patching procedure for solaris 10 ( sol10 u11) to latest patchset with sun cluster having failover zones so that same I should follow. Take an instance, there are sol1 and sol2 nodes and having two failover zones like sozone1-rg and sozone2-rg and currently... (1 Reply)
Discussion started by: nick101
1 Replies

2. Solaris

root disk mirroring in solaris volume manager for solaris 10

Need a procedure document to do "root disk mirroring in solaris volume manager for solaris 10". I hope some one will help me asap. I need to do it production environment. Let me know if you need any deatils on this. Thanks, Rama (1 Reply)
Discussion started by: ramareddi16
1 Replies

3. Red Hat

“noexec” and “nosuid”

I would like mimic "noexec” and “nosuid” on /tmp security when its a seperate file system BUT I would like to hang /tmp directly off of / "root". Any suggestions would be helpful. (1 Reply)
Discussion started by: trscam
1 Replies

4. Solaris

Unable to login using ssh,telnet onto my solaris machine with solaris 10 installed

Hi, I am unable to login into my terminal hosting Solaris 10 and get the below error message "Server refused to allocate pty ld.so.1: sh: fatal: libc.so.1: open failed: No such file or directory " Is there anyways i can get into my machine and what kind of changes are required to be... (7 Replies)
Discussion started by: sankasu
7 Replies
Login or Register to Ask a Question