Re:Show HN: Rssfs – An RSS reader written as a file system
by rhabarba on Monday May 11, 2020 @12:37AM
(#23138960)
You’re right, that would probably not be required.
Re:Show HN: Rssfs – An RSS reader written as a file system
by totony on Sunday May 10, 2020 @08:02PM
(#23137479)
Iirc, fuse is setuid anyways. Having mount privilege is equivalent to being root on linux.
Re:Show HN: Rssfs – An RSS reader written as a file system
by pengaru on Sunday May 10, 2020 @09:31PM
(#23138038)
There's no such thing as a `fuse` system executable on linux.
There is `fusermount` which is indeed suid (so is `mount` btw), but it's also been designed to accommodate unprivileged FUSE mounts and always adds 'nosuid' and 'nodev' mount options when establishing them.
It's not equivalent to being root at all.
https://www.kernel.org/doc/html/latest/filesystems/fuse.html...
Re:Show HN: Rssfs – An RSS reader written as a file system
by totony on Sunday May 10, 2020 @09:56PM
(#23138165)
That's fair. Unfamiliar about how this works, since ntfs-3g seems to drop root after mounting.
I would still not be comfortable about giving mount permissions to ordinary users (even through a setuid layer since they're known to cause security issues)
Why are you using sudo here? FUSE filesystems shouldn't require special privileges unless they're accessing privileged stuff like block devices owned by root.