lkml.org 
[lkml]   [2007]   [Sep]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: Chroot bug
    Alan Cox napsal(a):
    >> but many program use this as security feature. So do you think that bind
    >> may use vserver?
    >>
    >
    > It would be a lot stronger if it did. A bind running non-root will be
    > probably safe. A bind running as root can be attacked and break out of a
    > chroot trivially. I guess it depends how you run bind.
    >
    but not bind with selinux. It can chroot, but not does other things. So
    there is an question: Why we do not fix it. Tell me please some other
    reason than "you can workaround chroot other ways".

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2007-09-26 13:37    [W:4.116 / U:1.056 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site