bashedev / win-sshfs

Automatically exported from code.google.com/p/win-sshfs
1 stars 0 forks source link

sshfs exposes user remote folder mount to other users #37

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. install win-sshfs
2. mount a remote folder, note the remote folder's local name
3. login as another user (e.g. via rdp)
4. look for the remote folder

What is the expected output?

-> I expect that no other user will be able to see the folder I have mounted.

What do you see instead?

-> any user can walk the remote folder tree using windows explorer. This kinda 
defeats the purpose of ssh, e.g. on a machine that can host multiple 
simultaneous user sessions.

What version of the product are you using?

win-sshfs: 0.0.1.5
Client OS: win7 pro sp-whatever (current)
Server OS: Fedora 14
Ssh server: openssh-server-5.5p1

Please provide any additional information below.

Every combination of two simultaneous users I tried exposed the 1st user's 
remote folder to the 2nd user.

For example, if I run sshfs.exe as Admin from an rdp session (which works), a 
user account can walk the remote folder.

Original issue reported on code.google.com by jhsny...@gmail.com on 1 Aug 2012 at 2:21

GoogleCodeExporter commented 9 years ago
Hi,
sorry for the late response.
Currently what have you explained is a Dokan feature. Can't be "fixed" unless 
the whole Dokan mounting system changes. The only thing you could do maybe is 
to force mounter.exe service to be run as local user.

Original comment by mladenov...@gmail.com on 7 Aug 2012 at 3:41

GoogleCodeExporter commented 9 years ago

Original comment by mladenov...@gmail.com on 7 Oct 2012 at 7:04