sshfs exposes user remote folder mount to other users #37
Description
What steps will reproduce the problem?
1. install win-sshfs
2. mount a remote folder, note the remote folder's local name
3. login as another user (e.g. via rdp)
4. look for the remote folder
What is the expected output?
-> I expect that no other user will be able to see the folder I have mounted.
What do you see instead?
-> any user can walk the remote folder tree using windows explorer. This kinda
defeats the purpose of ssh, e.g. on a machine that can host multiple
simultaneous user sessions.
What version of the product are you using?
win-sshfs: 0.0.1.5
Client OS: win7 pro sp-whatever (current)
Server OS: Fedora 14
Ssh server: openssh-server-5.5p1
Please provide any additional information below.
Every combination of two simultaneous users I tried exposed the 1st user's
remote folder to the 2nd user.
For example, if I run sshfs.exe as Admin from an rdp session (which works), a
user account can walk the remote folder.
Original issue reported on code.google.com by [email protected] on 1 Aug 2012 at 2:21