trinity-users@lists.pearsoncomputing.net

Message: previous - next
Month: January 2017

Re: [trinity-users] serious mount problem

From: Stefan Krusche <linux@...>
Date: Wed, 11 Jan 2017 23:36:40 +0100
Am Mittwoch 11 Januar 2017 schrieb Istvan Gabor:
> Hello:
>
> I have Trinity R14.0.4 on openSUSE Leap 42.2.
> The desktop has a "My Computer" icon which is a shortcut to media:/.
> It opens a window that shows a lot of (all?) hard disk
> volumes/partitions.
>
> The problem:
>
> Normal user can mount any of these partititions. This is a SERIOUS
> security
> flaw. Normal user should not be able to mount internal disk partitions
> unless the partition is explicitely set so in /etc/fstab using "user"
> or
> "users" options.

I'm on a Devuan jessie / TDE R14.0.4 system and I only can mount/unmount the 
partitions which are thus marked in /etc/fstab. I am not able to reproduce the 
incorrect behaviour of TDE that you reported.

Stefan