Messages in this thread | | | Date | Tue, 9 Jul 2002 05:16:18 +0200 | From | Pavel Machek <> | Subject | Re: [uml-user] Re: user-mode port 0.58-2.4.18-36 |
| |
Hi!
> > So... what prevents uml root from inserting rogue module (perhaps > > using /dev/kmem) and escape the jail? > > That's prevented by the admin taking basic precautions and turning on 'jail', > which refuses to run if module support is present and which also disables > writing to /dev/kmem.
...and using CAP_SYS_RAWIO... Pavel -- Worst form of spam? Adding advertisment signatures ala sourceforge.net. What goes next? Inserting advertisment *into* email? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |