aboutsummaryrefslogtreecommitdiffstats
path: root/lib/libc/sys
diff options
context:
space:
mode:
authorColin Percival <cperciva@FreeBSD.org>2010-05-27 03:15:04 +0000
committerColin Percival <cperciva@FreeBSD.org>2010-05-27 03:15:04 +0000
commita6b5951a1159278502d0b699efcdf9276a4334db (patch)
treee4938b70333428a22b43a642ce2d063f2e1bb813 /lib/libc/sys
parent2e7e77ff792417b708755984259bd4833608e85b (diff)
downloadsrc-a6b5951a1159278502d0b699efcdf9276a4334db.tar.gz
src-a6b5951a1159278502d0b699efcdf9276a4334db.zip
Change the current working directory to be inside the jail created by
the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient
Notes
Notes: svn path=/releng/8.0/; revision=208586
Diffstat (limited to 'lib/libc/sys')
-rw-r--r--lib/libc/sys/mount.29
1 files changed, 8 insertions, 1 deletions
diff --git a/lib/libc/sys/mount.2 b/lib/libc/sys/mount.2
index 6ce2d4d2fa74..3d48f4110fce 100644
--- a/lib/libc/sys/mount.2
+++ b/lib/libc/sys/mount.2
@@ -107,7 +107,7 @@ This restriction can be removed by setting the
.Va vfs.usermount
.Xr sysctl 8
variable
-to a non-zero value.
+to a non-zero value; see the BUGS section for more information.
.Pp
The following
.Fa flags
@@ -370,3 +370,10 @@ functions appeared in
.At v6 .
.Sh BUGS
Some of the error codes need translation to more obvious messages.
+.Pp
+Allowing untrusted users to mount arbitrary media, e.g. by enabling
+.Va vfs.usermount ,
+should not be considered safe.
+Most file systems in
+.Fx
+were not built to safeguard against malicious devices.