Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 08 Oct 1999 23:15:38 +0200
From:      Poul-Henning Kamp <phk@critter.freebsd.dk>
To:        Justin Wells <jread@semiotek.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: more on chroot: "nochroot" filesystems 
Message-ID:  <5268.939417338@critter.freebsd.dk>
In-Reply-To: Your message of "Fri, 08 Oct 1999 17:12:37 EDT." <19991008171237.B1618@fever.semiotek.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <19991008171237.B1618@fever.semiotek.com>, Justin Wells writes:

>This defeats the "cd ../../../../../.. ; chroot ." trick, and many others.

I've tried hard to plug all escapes from chroot/jail in -current.  You
may want to consider a back port of some of those changes.

--
Poul-Henning Kamp             FreeBSD coreteam member
phk@FreeBSD.ORG               "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5268.939417338>