Almighty root
by
Bastian Blank
—
last modified
Apr 04, 2009 07:44 PM
Filed Under:
I was asked to take a look at a machine where aptitude don't even want to do the upgrade to etch. A first inspection shows some weird repositories in the source.list file and many daemons noone ever should use on that machine. I was able to do the upgrade with apt-get then.
After some time I got asked over modifications in /etc/exports. It basically included the following content:[1]
/ *(rw,async,no_root_squash) /home *(rw,async,no_root_squash,nohide) /usr *(rw,async,no_root_squash,nohide) /var *(rw,async,no_root_squash,nohide)
| [1] | For those who don't speak NFS: This exports the specified filesystems (/, /home, /usr and /var) to everyone, and accepts whatever the client system say. |
The machine was taked out of service immediately. We'll have no chance to answer the question whether this was silliness or intend.
