Bug 168207

Summary: CAN-2005-2876 umount unsafe -r usage
Product: [Fedora] Fedora Reporter: Josh Bressers <bressers>
Component: util-linuxAssignee: Karel Zak <kzak>
Status: CLOSED ERRATA QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: 4Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: impact=moderate,public=20050913,source=bugtraq
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-09-14 10:26:35 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-09-13 15:24:25 UTC 
+++ This bug was initially created as a clone of Bug #168206 +++

This issue was reported to bugtraq here:
http://marc.theaimsgroup.com/?l=bugtraq&m=112656096125857&w=2

The issue is that if a non root user is able to run umount -r, it is possible to
subvert the restrictions placed on a filesystem such as nosuid.
Comment 1 Josh Bressers 2005-09-13 15:25:15 UTC 
This issue also affects FC3
Comment 2 Karel Zak 2005-09-14 10:26:35 UTC 
Fixed.

FC4: util-linux-2.12p-9.11
FC3: util-linux-2.12a-24.5