Re: AIX 4.x Mount

[troy () AUSTIN IBM COM (Troy A. Bollinger)]

-----BEGIN PGP SIGNED MESSAGE-----

S. Ryan Quick wrote:
> My apologies if this is known already . . . however, I've seen nothing about
> it and it does concern me.  I have verified a problem with mount on AIX 4.1.3,
> 4.1.4, 4.2.0, and 4.2.1 which allows a normal user to mount any filesystem
> (including those already mounted by the system) on top of any writable
> space.

This has been fixed in the gold release of AIX 4.3.0.  To my knowledge,
there are no current plans to backport this fix.

> I have notified IBM of the problem . . . they have yet to respond.

Feel free to contact me with the PMR number and I'll make sure you get
an official response.

Thanks.
- --
Troy Bollinger                            troy () austin ibm com
AIX Security Development        security-alert () austin ibm com
PGP keyid: 1024/0xB7783129 Troy's opinions are not IBM policy

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQCVAwUBNKdHqMjqvEm3eDEpAQEF9wQAlX/1d+c66dZk9CqESFC6y78Zf0mssXTP
huNGPuCrcK2SLr0n3GveybVlvnh0wZYZRfun+ZuLtNLy2HWIYak/1g17X8GgEhqh
vYO8qbWx0jP+Hi2Njhg1mDqBofCkw+539Xdap4IDDVfg6YlRlYSGtCCMWwGPCzlu
PE5DMoL2/vY=
=7HwX
-----END PGP SIGNATURE-----