Re: [RFC] ext2 and ext3 block reservations can be bypassed

From: Jakob 豷tergaard (jakob@unthought.net)
Date: Sun May 12 2002 - 11:42:04 EST


On Sun, May 12, 2002 at 06:23:21PM +0200, Kasper Dupont wrote:
> Usually the last 5% of the diskspace on ext2 and ext3
> filesystems are reserved for root. But I just realized
> that they can be bypassed by redirecting the output
> from a suid root program to a file.
>
> This command will keep writing beyond the 95% limit:
> while true ; do mount ; done >filename

Hej Kasper,

Sure you were not running the shell as root ? :)

The redirection is handled by your shell, mount doesn't have anything to do
with the '>filename' part.

Actually, the more fun test is to
  mount > /etc/passwd
or
  mount > /dev/hda

But this won't work either, unless your shell (and therefore you as a user,
suid programs or not) have the permissions as required.

In short: I don't think you are seeing what you think you are seeing ;)

-- 
................................................................
:   jakob@unthought.net   : And I see the elder races,         :
:.........................: putrid forms of man                :
:   Jakob 豷tergaard      : See him rise and claim the earth,  :
:        OZ9ABN           : his downfall is at hand.           :
:.........................:............{Konkhra}...............:
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Tue May 14 2002 - 12:00:18 EST