[workspace-dev] Incorrect file checks in mount-alter.sh
Steffen Limmer
Steffen.Limmer at informatik.uni-erlangen.de
Wed Aug 25 09:28:49 CDT 2010
Hello,
in mount-alter.sh $mountpoint is checked if it lies under the authorized
mountpoint directory.
But if mountpoint is in the form '../../<dir>' one can mount images to
arbitrary directories that are not under the authorized mountpoint
directory.
Please correct me if i'm wrong.
Regards,
Steffen
--
=========================
Steffen Limmer
Lehrstuhl für Informatik 3
Friedrich-Alexander-Universität
91058 Erlangen
Tel.: +49 9131 85-27004
More information about the workspace-dev
mailing list