Tuesday, October 14, 2008

Mount removable devices with the nosuid option



Always mount removable devices with the nosuid option so that a malicious user cannot, for example, put a setuid copy of bash on a disk and have a shell with root privileges. By default, Ubuntu uses the nosuid option when mounting removable media.

No comments:

Post a Comment