Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Jan 2005 22:10:55 +0000
From:      Micah <micah@micah.ws>
To:        freebsd-security@freebsd.org
Subject:   Possible security issue with jails
Message-ID:  <20050111221055.GD68350@micah.tamu.edu>

next in thread | raw e-mail | index | archive | help
Howdy!

I'm not sure if this is actually an issue, feature or a bug,  but I have found
that inside a jail, the jailed root user is able to sniff traffic (and enable
promiscuous mode) on at least the interface of the IP address the jail is attached
to.

I have not found any documentation explaining if this should occur or not, but
I feel it is something that should at least be known to those using jails.

Please let me know if anyone knows if this is an error, a problem that can't be fixed,
or if it's designed to be this way.


Thanks!

-Micah



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050111221055.GD68350>