Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Helper Tool on FireWire




On 25 Jun 2006, at 13:55, "Finlay Dobbie" <email@hidden> wrote:




On 25/06/06, Gerriet M. Denkmann <email@hidden> wrote:
Why does your tool need to run from the boot partition?

It does not. But it needs to run setuid root, and this seems not to work on FireWire-non-boot-partitions.

Of course. Otherwise, I could take a FireWire drive, hook it up to my Mac, put a tool on it, make it setuid root, then connect my drive to your Mac and boom! Instance root access.

Well, if you near enough to my machine to insert a FireWire cable, then you are also able to insert a boot-CD.


But I agree: mounting external partitions with MNT_NOSUID = "don't honor setuid bits" is probably a good idea.

Gerriet.



_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/email@hidden

This email sent to email@hidden


Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.