password visible in 'mount' output?

password visible in 'mount' output?

[Ben Greear]

Is password supposed to be visible in the output of 'mount' ?

//192.168.100.3/d2 on /mnt/lf/fs3-cifs-2 type cifs (rw,srcaddr=192.168.100.217,user=greearb,passwd=xxx)
//2002::100:3/d2 on /mnt/lf/fs3-cifs6-2 type cifs (rw,srcaddr=2002::100:217,user=greearb,passwd=xxx)


Thanks,
Ben

-- 
Ben Greear <greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org>
Candela Technologies Inc  http://www.candelatech.com

Re: password visible in 'mount' output?

[Ben Greear]

On 08/31/2010 11:48 AM, Steve French wrote:
>
>
> On Tue, Aug 31, 2010 at 12:04 PM, Ben Greear <greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org
> <mailto:greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org>> wrote:
>
>
>     Is password supposed to be visible in the output of 'mount' ?
>
>
> No, neither the output of mount nor /proc/mounts should display this.
> What version of mount.cifs (type "mount.cifs -V" to get the version) are
> you running?

Standard Fedora 13, as far as I can tell, and I have no mount.cifs in $PATH

[root@ct503-10G-09 lanforge]# mount -V
mount from util-linux-ng 2.17.2 (with libblkid and selinux support)
[root@ct503-10G-09 lanforge]# more /etc/issue
Fedora release 13 (Goddard)
Kernel \r on an \m (\l)

[root@ct503-10G-09 lanforge]# which mount.cifs
/usr/bin/which: no mount.cifs in 
(/usr/lib64/qt-3.3/bin:/usr/kerberos/sbin:/usr/kerberos/bin:/usr/lib64/ccache:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/xorp/sbin:/root/bin)


Password is not shown in /proc/mounts, so that part seems fine.

Thanks,
Ben

-- 
Ben Greear <greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org>
Candela Technologies Inc  http://www.candelatech.com

Re: password visible in 'mount' output?

[Ben Greear]

>     Standard Fedora 13, as far as I can tell, and I have no mount.cifs
>     in $PATH
>
>
> You are right - if you are missing mount.cifs you will see what is
> passed into previous mounts, including the password (and cifs can't
> filter it out for you since this is being done by mount).   Not sure if
> this is fixable though - you should have mount.cifs installed (when this
> would not be a problem) and Fedora does package mount.cifs.

I installed 'cifs-utils', which provides /sbin/mount.cifs,
but 'mount' output is the same.

[root@ct503-10G-09 lanforge]# mount.cifs -V
mount.cifs version: 4.6

Thanks,
Ben

-- 
Ben Greear <greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org>
Candela Technologies Inc  http://www.candelatech.com

Re: password visible in 'mount' output?

[Jeff Layton]

On Tue, 31 Aug 2010 12:39:01 -0700
Ben Greear <greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org> wrote:

> 
> >     Standard Fedora 13, as far as I can tell, and I have no mount.cifs
> >     in $PATH
> >
> >
> > You are right - if you are missing mount.cifs you will see what is
> > passed into previous mounts, including the password (and cifs can't
> > filter it out for you since this is being done by mount).   Not sure if
> > this is fixable though - you should have mount.cifs installed (when this
> > would not be a problem) and Fedora does package mount.cifs.
> 
> I installed 'cifs-utils', which provides /sbin/mount.cifs,
> but 'mount' output is the same.
> 
> [root@ct503-10G-09 lanforge]# mount.cifs -V
> mount.cifs version: 4.6
> 

Running "mount" without args just displays the contents of /etc/mtab.
If you did the mount previously and then installed mount.cifs, it won't
fix the contents of /etc/mtab. New mounts shouldn't store the password
in /etc/mtab though.

-- 
Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>

Re: password visible in 'mount' output?

[Ben Greear]

On 08/31/2010 12:43 PM, Jeff Layton wrote:
> On Tue, 31 Aug 2010 12:39:01 -0700
> Ben Greear<greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org>  wrote:
>
>>
>>>      Standard Fedora 13, as far as I can tell, and I have no mount.cifs
>>>      in $PATH
>>>
>>>
>>> You are right - if you are missing mount.cifs you will see what is
>>> passed into previous mounts, including the password (and cifs can't
>>> filter it out for you since this is being done by mount).   Not sure if
>>> this is fixable though - you should have mount.cifs installed (when this
>>> would not be a problem) and Fedora does package mount.cifs.
>>
>> I installed 'cifs-utils', which provides /sbin/mount.cifs,
>> but 'mount' output is the same.
>>
>> [root@ct503-10G-09 lanforge]# mount.cifs -V
>> mount.cifs version: 4.6
>>
>
> Running "mount" without args just displays the contents of /etc/mtab.
> If you did the mount previously and then installed mount.cifs, it won't
> fix the contents of /etc/mtab. New mounts shouldn't store the password
> in /etc/mtab though.


Ahh, that did indeed fix it.

Thanks,
Ben


-- 
Ben Greear <greearb-my8/4N5VtI7c+919tysfdA@public.gmane.org>
Candela Technologies Inc  http://www.candelatech.com