Messages in this thread | | | Date | Tue, 25 Sep 2007 18:52:55 +0200 (CEST) | From | Jan Engelhardt <> | Subject | Re: Chroot bug |
| |
On Sep 25 2007 18:19, Miloslav Semler wrote: >> > > So what? Just do this: chdir into the root after chroot. >> > > >> > I don't think so. His exploit just got me all the way out of a chroot >> > within a >> > chroot within a chroot, inclusive of lots of chdirs. >> > >> >> Close all fds that point to directories outside the root ;-) >> > This does not help. Let's try: > chroot somewhere > mkdir foo > fd = open / > chroot foo
('fd' implicitly closed and chdir to /foo)
> fchdir fd
-EINVAL
> chdir ".."
/../ => /
> .... > chdir ".." > chroot "." > so you are in root.
so we remain in chroot. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |