Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-081: autofs Security Update

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-081: autofs Security Update
# 1  
Old 01-02-2008
S-081: autofs Security Update
There was a security issue with the default installed configurationof autofs version 5 whereby the entry for the "hosts" map did not specify the "nosuid" mount option. The risk is MEDIUM. A local user with control of a remote nfs server could create a setuid root executable within an exported filesystem on the remote nfs server that, if mounted using the default hosts map, would allow the user to gain root privileges.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT REDHAT

autofs

AUTOFS(8)						      System Manager's Manual							 AUTOFS(8)

NAME

       /etc/init.d/autofs - Control Script for automounter

SYNOPSIS

       /etc/init.d/autofs start|stop|reload

DESCRIPTION

       autofs  control	the  operation of the automount(8) daemons running on the Linux system. Usually autofs is invoked at system boot time with
       the start parameter and at shutdown time with the stop parameter. The autofs script can also manually be invoked by the system  administra-
       tor to shut down, restart or reload the automounters.

OPERATION

       autofs  will consult a configuration file /etc/auto.master (see auto.master(5)) to find mount points on the system. For each of those mount
       points a automount(8) process is started with the appropriate parameters. You can check the active mount points for  the  automounter  with
       the  /etc/init.d/autofs	status	command. After the auto.master configuration file is processed the autofs script will check for an NIS map
       with the same name. If such a map exists then that map will be processed in the same way as the auto.master map. The NIS map will  be  pro-
       cessed last.

       /etc/init.d/autofs  reload  will  check	the current auto.master map against running daemons. It will kill those daemons whose entries have
       changed and then start daemons for new or changed entries.

       If a map is modified then the change will become effective immediately. If the auto.master map is modified then the autofs script  must	be
       rerun to activate the changes.

       /etc/init.d/autofs status will display the current configuration and a list of currently running automount daemons.

SEE ALSO

       automount(8), autofs(5), auto.master(5).

AUTHOR

       This  manual  page  was	written  by  Christoph	Lameter  <chris@waterf.org>,  for  the	Debian GNU/Linux system.  Edited by H. Peter Anvin
       <hpa@transmeta.com>.

								    9 Sep 1997								 AUTOFS(8)