Hi, it seems puffs, our userspace filesystem framework, has a serious security issue: it is completely ignoring filesystem permissions! This is on NetBSD 5.1: # rump_tmpfs tmpfs /mnt [ doesn't return, so switching to another terminal ] # cp /etc/fstab /mnt # chmod 700 /mnt # chmod 600 /mnt/fstab --> now as a regular user: % cat /mnt/fstab [ works ] I can reproduce this issue with all puffs, rump and fuse filesystems (initially noticed it while testing fuse-encfs from pkgsrc). WTF? Geert -- Geert Hendrickx -=- ghen%telenet.be@localhost -=- PGP: 0xC4BB9E9F This e-mail was composed using 100% recycled spam messages!
Attachment:
pgpaOgGQsaFNW.pgp
Description: PGP signature