fkie-cad / fact_extractor

Standalone Utility for FACT-like extraction
GNU General Public License v3.0
80 stars 31 forks source link

Investigate guestfstools for mounting as unprivileged user #127

Open maringuu opened 8 months ago

maringuu commented 8 months ago

For btrfs.img in this repo:

virt-filesystems -a ./fact_extractor/plugins/unpacking/generic_fs/test/data/btrfs.img
guestmount -m /dev/sda -a  ./fact_extractor/plugins/unpacking/generic_fs/test/data/btrfs.img ~/mnt

I haven't looked in depth what filesystems are supported and how it works

maringuu commented 7 months ago

As @jstucke noticed this still needs SYS_ADMIN for finally mounting the filesystem via FUSE. Apparently this is not needed anymore in Linux 4.18 and can be replaced by mount namespaces. This comment nicely explains how to do this.