summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorcperciva <cperciva@FreeBSD.org>2010-05-27 03:15:04 +0000
committercperciva <cperciva@FreeBSD.org>2010-05-27 03:15:04 +0000
commitcecdfcbeea0822ed4b1ce847da15efb757dfa5d5 (patch)
tree7cf18b9e591640da6a05e682c0c6b4207a65a1fa /lib
parent429bc522d0d5dbf16d058cb9338f43e00fc51c88 (diff)
downloadFreeBSD-src-cecdfcbeea0822ed4b1ce847da15efb757dfa5d5.zip
FreeBSD-src-cecdfcbeea0822ed4b1ce847da15efb757dfa5d5.tar.gz
Change the current working directory to be inside the jail created by
the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient
Diffstat (limited to 'lib')
-rw-r--r--lib/libc/sys/mount.29
1 files changed, 8 insertions, 1 deletions
diff --git a/lib/libc/sys/mount.2 b/lib/libc/sys/mount.2
index 6ce2d4d..3d48f41 100644
--- a/lib/libc/sys/mount.2
+++ b/lib/libc/sys/mount.2
@@ -107,7 +107,7 @@ This restriction can be removed by setting the
.Va vfs.usermount
.Xr sysctl 8
variable
-to a non-zero value.
+to a non-zero value; see the BUGS section for more information.
.Pp
The following
.Fa flags
@@ -370,3 +370,10 @@ functions appeared in
.At v6 .
.Sh BUGS
Some of the error codes need translation to more obvious messages.
+.Pp
+Allowing untrusted users to mount arbitrary media, e.g. by enabling
+.Va vfs.usermount ,
+should not be considered safe.
+Most file systems in
+.Fx
+were not built to safeguard against malicious devices.
OpenPOWER on IntegriCloud