News for hackers. Stuff that matters.

A comment on Show HN: Rssfs – An RSS reader written as a file system. Parent comment

Re:Show HN: Rssfs – An RSS reader written as a file system by totony on Sunday May 10, 2020 @08:02PM (#23137479)
Iirc, fuse is setuid anyways. Having mount privilege is equivalent to being root on linux.
[ Parent | on HN ]
Re:Show HN: Rssfs – An RSS reader written as a file system by pengaru on Sunday May 10, 2020 @09:31PM (#23138038)
There's no such thing as a `fuse` system executable on linux.

There is `fusermount` which is indeed suid (so is `mount` btw), but it's also been designed to accommodate unprivileged FUSE mounts and always adds 'nosuid' and 'nodev' mount options when establishing them.

It's not equivalent to being root at all.

https://www.kernel.org/doc/html/latest/filesystems/fuse.html...

[ Parent | on HN ]
Re:Show HN: Rssfs – An RSS reader written as a file system by totony on Sunday May 10, 2020 @09:56PM (#23138165)
That's fair. Unfamiliar about how this works, since ntfs-3g seems to drop root after mounting.

I would still not be comfortable about giving mount permissions to ordinary users (even through a setuid layer since they're known to cause security issues)

[ Parent | on HN ]