os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Add a warning that usermount (vfs.usermount) is not generally safe.

Browse source 
Text by:	rwatson (mostly)
With hat:	so
This commit is contained in:
Simon L. B. Nielsen 2010-05-27 09:52:11 +00:00
parent a2342de0f4
commit 9ced15d6cf
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=35812
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
en_US.ISO8859-1/books/handbook/disks/chapter.sgml
View file

@ -804,6 +804,14 @@ da0: 126MB (258048 512 byte sectors: 64H 32S/T 126C)</screen>
to format and create partitions on the USB drive if to format and create partitions on the USB drive if
needed.</para> needed.</para>
<warning>
<para>Allowing untrusted users to mount arbitrary media,
e.g. by enabling <literal>vfs.usermount</literal> as
described below, should not be considered safe from a
security point of view. Most file systems in &os; were not
built to safeguard against malicious devices.</para>
</warning>
<para>To make this device mountable as a normal user, certain <para>To make this device mountable as a normal user, certain
steps have to be taken. First, the devices that are created steps have to be taken. First, the devices that are created
when a USB storage device is connected need to be accessible when a USB storage device is connected need to be accessible