meta-openembedded/meta-filesystems
Tudor Florea 7f1df52e94 fuse: fix for CVE-2015-3202 Privilege Escalation
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before
invoking (1) mount or (2) umount as root, which allows local users to write
to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is
used by mount's debugging feature.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202
http://www.openwall.com/lists/oss-security/2015/05/21/9

Signed-off-by: Tudor Florea <tudor.florea@enea.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-19 17:05:16 -07:00
..
conf meta-filesystems: Add LAYERVERSION and LAYERDEPENDS 2015-01-28 08:59:25 +01:00
recipes-filesystems PNBLACKLIST: use weak assignments 2014-12-26 18:04:33 -08:00
recipes-support fuse: fix for CVE-2015-3202 Privilege Escalation 2015-07-19 17:05:16 -07:00
recipes-utils meta-filesystems: use BPN in SRC_URI 2014-07-15 14:56:55 +02:00
COPYING.MIT meta-filesystems creation 2013-08-16 12:58:31 +02:00
README update maintainer info in README's for dizzy 2014-10-30 09:07:58 +01:00

This README file contains information on the contents of the filesystems layer.

Please see the corresponding sections below for details.

Dependencies

This layer depends on:

URI: git://git.openembedded.org/bitbake branch: 1.24

URI: git://git.openembedded.org/openembedded-core layers: meta branch: dizzy

URI: git://git.openembedded.org/meta-openembedded layers: meta-oe branch: dizzy

Patches

Please submit any patches against the filesystems layer to the OpenEmbedded development mailing list (openembedded-devel@lists.openembedded.org) with '[meta-filesystems][dizzy]' in the subject.

Dizzy branch maintainers: Otavio Salvador otavio@ossystems.com.br Armin Kuster akuster808@gmail.com

Prefix email subject with: [dizzy]

Maintainers List: physfs Andreas Müller schnitzeltony@googlemail.com

fuse Koen Kooi koen@dominion.thruhere.net Philip Balister philip@balister.org hongxu jia hongxu.jia@windriver.com

ifuse Sander van Grieken sander@outrightsolutions.nl Koen Kooi koen@dominion.thruhere.net

sshfs-fuse Philip Balister philip@balister.org Koen Kooi koen@dominion.thruhere.net

owfs Otavio Salvador otavio@ossystems.com.br Koen Kooi koen@dominion.thruhere.net hongxu jia hongxu.jia@windriver.com

ntfs-3g-ntfsprogs Otavio Salvador otavio@ossystems.com.br hongxu jia hongxu.jia@windriver.com

cramfs Koen Kooi koen@dominion.thruhere.net

smbnetfs Sander van Grieken sander@outrightsolutions.nl Koen Kooi koen@dominion.thruhere.net

fuse-exfat hongxu jia hongxu.jia@windriver.com

exfat-utils hongxu jia hongxu.jia@windriver.com

f2fs-tools Martin Jansa Martin.Jansa@gmail.com Koen Kooi koen@dominion.thruhere.net

xfsprogs Koen Kooi koen@dominion.thruhere.net hongxu jia hongxu.jia@windriver.com

When sending single patches, please use something like:

git send-email -1 -M
--to openembedded-devel@lists.openembedded.org
--subject-prefix=meta-filesystems][PATCH

Table of Contents

I. Adding the filesystems layer to your build II. Misc

I. Adding the filesystems layer to your build

In order to use this layer, you need to make the build system aware of it.

Assuming the filesystems layer exists at the top-level of your yocto build tree, you can add it to the build system by adding the location of the filesystems layer to bblayers.conf, along with any other layers needed. e.g.:

BBLAYERS ?= "
/path/to/yocto/meta
/path/to/yocto/meta-oe
/path/to/yocto/meta-filesystems
"

II. Misc

--- physfs --- A library to provide abstract access to various archives

--- fuse --- Filesystem in Userspace (FUSE) is a simple interface for userspace programs to export a virtual filesystem to the Linux kernel.

--- ifuse --- A fuse filesystem to access the contents of an iPhone or iPod Touch

--- sshfs-fuse --- A filesystem client based on the SSH File Transfer Protocol

--- owfs --- An easy way to use the 1-Wire file system

--- ntfs-3g-ntfsprogs --- The ntfs-3g is a freely available read/write NTFS driver for Linux and ntfsprogs includes utilities for doing all required tasks to NTFS partitions.

--- cramfs --- Builds cramfs filesystems for embedded systems

--- smbnetfs --- SMBNetFS is a Linux/FreeBSD filesystem that allow you to use samba/microsoft network in the same manner as the network neighborhood in Microsoft Windows.

--- fuse-exfat --- A read and write exFAT driver for FUSE

--- exfat-utils --- Utilities to create, check, label and dump exFAT filesystem

--- f2fs-tools --- Tools needed for creating and managing f2fs partitions

--- xfsprogs --- It provides XFS filesystem utilities.