Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I read recently that someone demonstrated a security attack on a PC via the use of automount and a USB stick.

How vulnerable am I to this attack and what steps are developers doing to be proactive against this sort of thing?

share|improve this question

1 Answer 1

up vote 35 down vote accepted

You're not vulnerable to the specific attack, but the approach is very interesting. The vulnerabilities used are already fixed.

I've been chatting with Jon Larimer since I heard about his presentation at Shmoo. The defeat of ASLR takes quite a while (Larimer is brute-forcing it on an NX-emu 32bit system -- a relatively easy target -- and for the demo he disabled ASLR to show it more quickly), and at the time hadn't found a workable way to bypass AppArmor (which he also turned off for the demo), so this speaks pretty well to the proactive defenses in Ubuntu. Using 64bit would have made the attack unfeasible.

Regardless, we took the opportunity to ask the Desktop team to find a way to disable auto-mounting when the screen is locked to avoid this kind of "local but unauthenticated" attack, and have been reviewing improvements to the other thumbnailers (adding ASLR and AppArmor profiles).

I've actually written about it here for people interested in more details.

share|improve this answer
    
Does it set no execute on mount of removable media? –  richard Feb 27 '12 at 16:54

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.