Re: feature-mtab-translator (v3)

[Neal H. Walfield]

At Fri, 19 Jul 2013 18:04:47 +0200,
Justus Winter wrote:
> My personal preference would be to run the translator on /proc/mounts
> as unprivileged user created solely for this purpose by default. It's
> up to the system administrator to change that if he wishes. I know
> it's not as magically as it could be if the mtab translator would
> impersonate the requesting user, but then again, this is no problem of
> the RPC procedure or the server side implementation of it.

The translator should never impersonate the user.  At most it should
mediate access.  If more authority is needed, the client should
interact directly with the translator in question.  This can be done
by having the mediator return an unauthenticated port.  Anything else
will request in the confused deputy and a huge attack surface.

Neal