#724690 sshfs: user's mountpoint is not accessible by root

Package:
sshfs
Source:
sshfs-fuse
Description:
filesystem client based on SSH File Transfer Protocol
Submitter:
Alessandro Vesely
Date:
2013-09-27 09:15:22 UTC
Severity:
normal
#724690#5
Date:
2013-09-26 16:48:43 UTC
From:
To:
Superuser has access to anything on a given machine,
usually.  However, after a user mounts sshfs, the
mount point becomes unreadable by other shells:
stat says "Permission denied" even to root.

The ability to stat mountpoints would allow commands
like `find / -xdev ...` to complete without errors
when issued by root.

#724690#10
Date:
2013-09-27 08:56:07 UTC
From:
To:
I understand those security concerns.  What I'm asking is that just
the mountpoint be accessible to root, not the remote files.  That
would be enough for root to learn that the directory contents reside
on a different device.  I see no other way to avoid breaking scripts
such as check-setuid (package checksecurity).

#724690#15
Date:
2013-09-27 09:14:33 UTC
From:
To:
Distro people should start thinking about doing per-user namespaces.
It would clean up the fuse mount vs. root access mess.

Not sure who would be responsible for such decisions.  Perhaps as a
first step, PAM maintainer could be asked?

Thanks,
Miklos