lkml.org 
[lkml]   [1999]   [May]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: access to proc filesystem from chrooted process
Hi Peri.

>> Unless I'm misunderstanding this, it appears to be pointless since
>> only processes chroot'd to / or /proc could see the entries in the
>> proc file system anyway, as if they're chroot'd anywhere else,
>> they can't even access /proc ???

> It is possible to mount the proc file system onto a directory so
> that it is visible to chrooted processes. This can be useful,
> and should ideally be no more dangerous than allowing it to be
> visible to an unprivileged telnet account.

Are you referring to some means of mounting /proc so it appears
visible to ALL processes no matter where they're chroot'd to? If so,
I'd love to know how.

Sure, I know that the proc file system does not have to be mounted
over /proc (although it usually is), but I'd love to know how to mount
it so that it's visible to two processes that are respectively
chroot'd as follows:

1. /home/ftp (aka ~ftp)

2. /usr/mirrors (aka ~mirrors)

As you can see, there are no common subdirectories between those two
processes...

Best wishes from Riley.

+----------------------------------------------------------------------+
| There is something frustrating about the quality and speed of Linux |
| development, ie., the quality is too high and the speed is too high, |
| in other words, I can implement this XXXX feature, but I bet someone |
| else has already done so and is just about to release their patch. |
+----------------------------------------------------------------------+
* ftp://ftp.MemAlpha.cx/pub/rhw/Linux
* http://www.MemAlpha.cx/kernel.versions.html


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.102 / U:0.924 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site