From owner-freebsd-questions@FreeBSD.ORG Thu Mar 3 22:22:32 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CBAB716A4CE for ; Thu, 3 Mar 2005 22:22:32 +0000 (GMT) Received: from prosporo.hedron.org (hedron.org [66.11.182.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4B2E343D41 for ; Thu, 3 Mar 2005 22:22:32 +0000 (GMT) (envelope-from ean@hedron.org) Received: from www.hedron.org (localhost.hedron.org [127.0.0.1]) by prosporo.hedron.org (Postfix) with ESMTP id 4F4FCC120; Thu, 3 Mar 2005 17:23:09 -0500 (EST) Received: from 216.220.59.169 (SquirrelMail authenticated user ean); by www.hedron.org with HTTP; Thu, 3 Mar 2005 17:23:09 -0500 (EST) Message-ID: <4011.216.220.59.169.1109888589.squirrel@216.220.59.169> In-Reply-To: <200503031316.56083.mistry.7@osu.edu> References: <4227164D.3050103@cis.strath.ac.uk> <2939.216.220.59.169.1109865872.squirrel@216.220.59.169> <42274C9D.4000107@cis.strath.ac.uk> <200503031316.56083.mistry.7@osu.edu> Date: Thu, 3 Mar 2005 17:23:09 -0500 (EST) From: "Ean Kingston" To: "Anish Mistry" User-Agent: SquirrelMail/1.4.3a X-Mailer: SquirrelMail/1.4.3a MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal cc: freebsd-questions@freebsd.org cc: Chris Hodgins Subject: Re: Sharing directories with jails X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2005 22:22:32 -0000 > On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote: [cut original question and answer] >> Ok perhaps I should clarify what my intentions are a little more. >> I am planning on providing a FreeBSD jail for any member of a geek >> society I am a member of. When I say they are untrusted, I mean >> that I won't be giving them full root access to my server but I >> trust them enough not to do anything malicious inside a jail. It >> is just like a fun place they can play and not have to worry to >> much about breaking things. >> >> How easy is it exactly to break out of a jail if you have access to >> development tools? >> > > http://www.securiteam.com/unixfocus/5WP031535U.html How current is this? The article appears to be dated 2001. Are there still buffer-overflow issues with /proc? > > If you use securelevels you can a sigificantly improve security. > -- Ean Kingston E-Mail: ean_AT_hedron_DOT_org PGP KeyID: 1024D/CBC5D6BB URL: http://www.hedron.org/