[2788] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Inherited & RO Filesystems

daemon@ATHENA.MIT.EDU (Brett Lymn)
Mon Jun 24 04:10:46 1996

Date:         Mon, 24 Jun 1996 14:39:46 +0930
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Brett Lymn <blymn@awadi.com.au>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To:  <Pine.LNX.3.91.960621122046.247G-100000@underground.org> from
              "Aleph One" at Jun 21, 96 12:26:34 pm

According to Aleph One:
>
>        As an aside, an intruder could use an inherited filesystem (if
>supported by the OS) to get around not being able to install backdoors
>and trojans on RO media. If you are not familiar with this filesystem,
>it allows you to mount directories "layered" over one another, with for
>example file on the "top" filesystem shadowing file of the same name on
>filesystems under it.
>

Yeah, good point.  I think that Sun called that the Translucent File
System (TFS) in StunOS and it required an option in the kernel config
to make it work.  Similarly, the *BSD have the same thing with a
different name - the union file system (I think).  Again, that needs a
kernel option to run.

--
Brett Lymn, Computer Systems Administrator, AWA Defence Industries
===============================================================================
  "Upgrading your memory gives you MORE RAM!" - ad in MacWAREHOUSE catalogue.

home help back first fref pref prev next nref lref last post