From: Abdelhakim Qbaich via Bug reports for GNU Guix <bug-guix@gnu.org>
To: 46980@debbugs.gnu.org
Subject: bug#46980: ntfs-3g and setuid root with an external FUSE library
Date: Sat, 6 Mar 2021 14:24:32 -0800 [thread overview]
Message-ID: <20210306142432.5997158a@rome> (raw)
Hi,
In the default set of desktop services, ntfs-3g is made setuid root:
> (simple-service 'mount-setuid-helpers setuid-program-service-type
> (list (file-append nfs-utils "/sbin/mount.nfs")
> (file-append ntfs-3g "/sbin/mount.ntfs-3g")))
However, as it is built with:
> "--with-fuse=external" ;use our own FUSE
Running mount.ntfs-3g yields:
> Mount is denied because setuid and setgid root ntfs-3g is insecure
> with the external FUSE library. Either remove the setuid/setgid bit
> from the binary or rebuild NTFS-3G with integrated FUSE support and
> make it setuid root.
--
Abdelhakim Qbaich
next reply other threads:[~2021-03-07 12:09 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-03-06 22:24 Abdelhakim Qbaich via Bug reports for GNU Guix [this message]
2024-03-04 19:27 ` bug#46980: ntfs-3g and setuid root with an external FUSE library William via Bug reports for GNU Guix
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210306142432.5997158a@rome \
--to=bug-guix@gnu.org \
--cc=46980@debbugs.gnu.org \
--cc=abdelhakim@qbaich.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).