* CVE-2018-10906-1:
fusermount: don't feed "escaped commas" into mount options
The old code permits the following behavior:
$ _FUSE_COMMFD=10000 priv_strace -etrace=mount -s200 fusermount -o 'foobar=\,allow_other' mount
mount("/dev/fuse", ".", "fuse", MS_NOSUID|MS_NODEV, "foobar=\\,allow_other,fd=3,rootmode=40000,user_id=1000,group_id=1000") = -1 EINVAL (Invalid argument)
However, backslashes do not have any special meaning for the kernel here.
As it happens, you can't abuse this because there is no FUSE mount option
that takes a string value that can contain backslashes; but this is very
brittle. Don't interpret "escape characters" in places where they don't
work.
* CVE-2018-10906-2:
fusermount: refuse unknown options
Blacklists are notoriously fragile; especially if the kernel wishes to add
some security-critical mount option at a later date, all existing systems
with older versions of fusermount installed will suddenly have a security
problem.
Additionally, if the kernel's option parsing became a tiny bit laxer, the
blacklist could probably be bypassed.
Whitelist known-harmless flags instead, even if it's slightly more
inconvenient.
Affects fuse < 2.9.8 and fuse < 3.2.5
Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
:**/fuse*.bb
* Assert INITSCRIPT_PARAMS to install the fuse initscript according to
its LSB header instead of defaults. Script now starts only during
runlevel 'S'.
* Also set priority to 03 such that fuse is loaded before udev. This
enables systems which utilize udev to mount exfat and other
fuse-provided filesystems as a part of the boot process.
Natinst-CAR-ID: 630632
Signed-off-by: Alex Stewart <alex.stewart@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The recent fuse recipe update broke fetching the sources when building
fuse-native (it tried to fetch non-existent package
fuse-native-2.9.7.tar.gz).
Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Set MOUNT_FUSE_PATH explicitly to ${base_sbindir} before configure.
Making this explicit will let people override base_sbindir with the
desired effect (for instance when building a distro with merged /
and /usr).
Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>
