strange software installation problem

[Tim Writer]

Alex Maynard <amaynard-vQ8rsROW2HJSpjfjxSPG1fd9D2ou9A/h at public.gmane.org> writes:

> Is it a good idea to add something like "exec" into the /etc/fstab? Are
> there many viruses spread by cdrom?

That depends.  If you use the user option with your cdrom in /etc/fstab then
_any_ user of the system can mount a cdrom.  If you trust all your users,
(e.g. if this is your home system), adding exec is safe.  Otherwise, it's
another potential avenue of attack.  Of course, noexec doesn't buy you much
additional security as most users will have access to a file system (like
/home) where they can execute binaries.  So, it's simple enough to copy a
program from the CD to their home.

> On Sun, 11 Jan 2004, Anton Markov wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > I believe "noexec" is the default for removable drives.  I think it's
> > designed to prevent execution of viruses.  I constantly get errors about
> >  it not being a recognized option for samba mounts.
> >
> > Alex Maynard wrote:
> > > Hi Paul,
> > >
> > > Thank you. Your suggestion below "bash /cdrom/install" worked, although
> > > the strange thing is I didn't find "noexec" in /etc/fstab.
> > >
> >
> >
> > - --
> > Anton Markov <("anton" + "@" + "truxtar" + "." + "com")>
> >
> > GnuPG Key fingerprint =
> > 5546 A6E2 1FFB 9BB8 15C3  CE34 46B7 8D93 3AD1 44B4
> >
> > *** LINUX - MAY THE SOURCE BE WITH YOU! ***
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.1 (GNU/Linux)
> > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> >
> > iD8DBQFAAfFbRreNkzrRRLQRAgXPAJ9D7GpHmaw4A7zGh9oyuXdfRhed4QCdG984
> > 61blkMbIT6nX/NcXa5p072A=
> > =iU6P
> > -----END PGP SIGNATURE-----
> > --
> > The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
> > TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> > How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml
> >
> 
> ------------
> Alex Maynard
> Assistant Professor
> Department of Economics
> University of Toronto
> 150 St. George St., N304
> Toronto ON M5S 3G7
> Canada
> e-mail: amaynard-vQ8rsROW2HJSpjfjxSPG1fd9D2ou9A/h at public.gmane.org
> tel: (416) 978-4358
> 
> 
> --
> The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml
> 

-- 
tim writer <tim-s/rLXaiAEBtBDgjK7y7TUQ at public.gmane.org>                                  starnix inc.
905.771.0017 ext. 225                           thornhill, ontario, canada
http://www.starnix.com              professional linux services & products
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml