Messages in this thread | | | Date | Sun, 1 May 2005 10:41:30 -0500 | From | Eric Van Hensbergen <> | Subject | Re: [PATCH] private mounts |
| |
On 5/1/05, Miklos Szeredi <miklos@szeredi.hu> wrote: > > As someone pointed out, CAP_SYS_ADMIN processes can already escape the > chroot jail with CLONE_NEWNS. (fd=open("."); clone(CLONE_NEWNS); > [child:] fchdir(fd); chdir("..")) >
This really does seem like a bug. Is there are a reason behind this "feature", or should one of us be looking into a patch to correct this?
Miklos you earlier suggested: >>>How about fixing fchdir, so it checks whether you gone outside the >>>tree under current->fs->rootmnt? Should be fairly easy to do.
-eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |