View Issue Details

IDProjectCategoryView StatusLast Update
0004541Kali LinuxGeneral Bugpublic2018-10-30 11:06
Reportermeizikyn Assigned Torhertzog  
PrioritylowSeverityminorReproducibilityalways
Status closedResolutionsuspended 
Product Version2017.3 
Summary0004541: Forensics mode auto-mounts all local partitions at boot
Description

When booting a live system in "Forensics Mode", the kernel (or what looks like an initramfs script /init/premount.sh) attempts to mount every partition in my system.

It then hangs indefinitely attempting to do this when it reaches my first NTFS partition, preventing boot.

I thought the only thing forensics mode was for, was to prevent this behavior; super terrifying.

Steps To Reproduce

Boot kernel and initrd from hdd in forensics mode (noswap, noautomount)

Additional Information

I am using the kernel and initrd from the Install ISO to load the live-squashfs from an ext4 partition (as opposed to a CD/DVD/USB), as I am not at liberty to load the ISO in a more "supported" fashion.

Clearly the way I am booting is unsupported, however I believe forensics mode should disable any automounting scripts regardless, unless ignoring noautomount was intended in the ISO boot method?

Activities

rhertzog

rhertzog

2018-02-15 14:29

administrator   ~0008683

FWIW the "noautomount" keyword is meant to disable the "automount" feature of modern desktops and that's what it does.

Are you sure that the initramfs tries to mount all partitions? Isn't it simply respecting /etc/fstab?

How did you witness that it actually tried to mount all partitions?

meizikyn

meizikyn

2018-02-16 00:48

reporter   ~0008684

I don't believe it is parsing fstab, as the fstab of "filesystem.squashfs" is empty.

I am witnessing the mounting process(s) occur via. boot messages as the kernel loads.

/* Boot Messages
Begin: Loading Essential Drivers ... done.
Begin: Running /scripts/init-premount ... done.
Begin: Mounting root file system ... [ 6.038081] EXT4-fs (sda10) # mount info

strange because the files live in LVM, and the root-fs in squashfs file

EXT4-fs (sda2): mounting ext2 file system using the ext4 subsystem
*/

continues to mount through my partitions on "sda" until reaching an NTFS fs;

reaching the NTFS filesystem, it hangs at message
"ntfs: volume version 3.1"

I initially believed this to be occurring during the initrd phase, however upon dumping the CPIO, I could not find this script, will keep looking for it's location.

rhertzog

rhertzog

2018-07-27 09:24

administrator   ~0009391

If you are not able to provide more information, we will close this bug in a little while. Please find out what is responsible of the undesired mounts on your system.

g0tmi1k

g0tmi1k

2018-10-30 11:06

administrator   ~0009852

Due to the age of the OS (Kali Moto [v1], Kali Safi [v2], Kali Rolling 2016.x/2017.x/2018.1), these legacy versions are no longer supported.
We will be closing this ticket due to inactivity.

Please could you see if you are able to replicate this issue with the latest version of Kali Linux - https://www.kali.org/downloads/)?

If you are still facing the same problem, feel free to re-open the ticket. If you choose to do this, could you provide more information to the issue you are facing,and also give information about your setup?
For more information, please read: https://kali.training/topic/filing-a-good-bug-report/

Issue History

Date Modified Username Field Change
2018-02-15 04:24 meizikyn New Issue
2018-02-15 14:29 rhertzog Note Added: 0008683
2018-02-15 14:29 rhertzog Assigned To => rhertzog
2018-02-15 14:29 rhertzog Status new => feedback
2018-02-16 00:48 meizikyn Note Added: 0008684
2018-02-16 00:48 meizikyn Status feedback => assigned
2018-06-22 06:19 g0tmi1k Severity major => minor
2018-07-27 09:24 rhertzog Status assigned => feedback
2018-07-27 09:24 rhertzog Note Added: 0009391
2018-10-30 11:06 g0tmi1k Status feedback => closed
2018-10-30 11:06 g0tmi1k Resolution open => suspended
2018-10-30 11:06 g0tmi1k Note Added: 0009852