[Bug 221064] zfs should not be able to shadow mount on root directory from userspace

Poul-Henning Kamp phk at phk.freebsd.dk
Sat Jul 29 07:35:04 UTC 2017


--------
In message <bug-221064-3630-CUGgC70s9s at https.bugs.freebsd.org/bugzilla/>, bugzi
lla-noreply at freebsd.org writes:

>I personally think that allowing to mount over / is more dangerous than useful.

Quite the contrary, it is far more useful than dangerous:  It is not
uncommon for embedded systems to boot with a absolutely minimal root
filesystem compiled into the kernel, and /sbin/init in that filesystem
will mount the "real" root over / and exec the "real" /sbin/init.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.


More information about the freebsd-fs mailing list