Messages in this thread |  | | From | Paul Menage <> | | Subject | Re: [PATCH] User chroot | | Date | Tue, 26 Jun 2001 17:37:01 -0700 |
| |
In article <0C01A29FBAE24448A792F5C68F5EA47D1205FB@nasdaq.ms.ensim.com>, you write: > >Safe, perhaps, but also completely useless: there is no way the user >can set up a functional environment inside the chroot. In other >words, it's all pain, no gain. >
It could potentially be useful for a network daemon (e.g. a simplified anonymous FTP server) that wanted to be absolutely sure that neither it nor any of its libraries were being tricked into following a bogus symlink, or a "/../" in a passed filename. After initialisation, the daemon could chroot() into its data directory, and safely only serve the set of files within that directory hierarchy.
This could be regarded as the wrong way to solve such a problem, but this kind of bug seems to be occurring often enough on BugTraq that it might be useful if you don't have the resources to do a full security audit on your program (or if the source to some of your libraries isn't available).
Paul - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |