[lkml]   [2001]   [Jun]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] User chroot
Followup to:  <20010627014534.B2654@ondska>
By author: Jorgen Cederlof <>
In newsgroup:
> Have you ever wondered why normal users are not allowed to chroot?
> I have. The reasons I can figure out are:
> * Changing root makes it trivial to trick suid/sgid binaries to do
> nasty things.
> * If root calls chroot and changes uid, he expects that the process
> can not escape to the old root by calling chroot again.
> If we only allow user chroots for processes that have never been
> chrooted before, and if the suid/sgid bits won't have any effect under
> the new root, it should be perfectly safe to allow any user to chroot.

Safe, perhaps, but also completely useless: there is no way the user
can set up a functional environment inside the chroot. In other
words, it's all pain, no gain.

<> at work, <> in private!
"Unix gives you enough rope to shoot yourself in the foot."
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:17    [W:0.069 / U:0.464 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site