Re: [uml-devel] Hardening hostfs

[BlaisorBlade <blaisorblade_spam@yahoo.it>]

Alle 00:35, sabato 18 ottobre 2003, Henrik Nordstrom ha scritto:
> On Thu, 16 Oct 2003, Doug Dumitru wrote:
> > 1.  If hostfs is compiled in as a module, then the hostfs=...
> > command-line arguments are not used.  Thus, trying to restrict access
> > with this does not appear to be effective.
>
> There should be a module argument in this case.. but it seems there is no
> module arguments for the hostfs options..
As noted by Steve Schmidtke, in answer to a patch I posted about a different 
problem, you cannot make this an option for the module. If inside the Uml you 
have root access, you can even omit the option when you load the module(and 
to call mount you must be root anyway). So, the only right behaviour is to 
make the module read the option supplied at boot time.

IIRC, in the approaching 2.6 mainline kernel there is something for this 
purpose(I remember an article on LWN about module infrastructure changes), 
but I only have a very vague idea.

One solution which would work even now is to move the __uml_setup code 
somewhere else, and to make it conditional to CONFIG_HOSTFS(or whatever name 
it has): the macro is defined both if it's compiled as a module and if it's 
compiled statically. Then the actual module would read the external variable.
-- 
cat <<EOSIGN
Paolo Giarrusso, aka Blaisorblade
Linux Kernel 2.4.21/2.6.0-test on an i686; Linux registered user n. 292729
EOSIGN



-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise 
Linux in the Boardroom; in the Front Office; & in the Server Room 
http://www.enterpriselinuxforum.com
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel