Rawhide gnome mounts everything in sight

John Summerfield debian at herakles.homelinux.org
Fri May 30 22:59:10 UTC 2008


Michal Jaegermann wrote:
> On Fri, May 30, 2008 at 12:44:41PM -0400, Clyde E. Kunkel wrote:
>> On boot, gnome mounts every partition I have on /media on my rawhide 
>> test system.  How do I get it to stop?
> 
> See painstakingly ignored security bug
> https://bugzilla.redhat.com/show_bug.cgi?id=251062

It's bizarre that that hasn't been fixed.

I was horrified to find my NTFS partitions mounted rw, I didn't pursue 
it because I had other things on my mind.

I don't trust Linux to write to NTFS, and I won't until I have a 
throw-away filesystem _and_ have verified it myself. Even then, I won't 
trust it much.

As for logging in as root, I can, and the extent to which it represents 
a security hazard depends on context and circumstances _I_ know with 
regard to my systems, but you folk don't. In the particular case where I 
found my NTFS filesystems mounted rw, I was running bleeding-edge, and 
had my rawhide system harmed itself, well that's the risk, but willfully 
exposing my Windows filesystems to increased risk by mounting them, not 
just ro but _rw_ is just not acceptable.

The software suppliers' role in this is to make their software as safe 
as they can, even when used by root, and provide the tools users need 
while not getting in their way.

Mounting filesystems just because you can is unsafe; prohibiting users 
from logging in as root is getting in the way.




-- 

Cheers
John

-- spambait
1aaaaaaa at coco.merseine.nu  Z1aaaaaaa at coco.merseine.nu
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)




More information about the fedora-test-list mailing list