Date: Sun, 28 May 2006 08:16:59 GMT From: Matteo Riondato <matteo@FreeBSD.org> To: bugreport@tux.linux666.com, matteo@FreeBSD.org, freebsd-bugs@FreeBSD.org Subject: Re: kern/83297: [bpf] Possible issue with FreeBSD 5.4 jailing and BPF Message-ID: <200605280816.k4S8Gx4C003350@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
Synopsis: [bpf] Possible issue with FreeBSD 5.4 jailing and BPF State-Changed-From-To: open->closed State-Changed-By: matteo State-Changed-When: Sun May 28 08:11:44 UTC 2006 State-Changed-Why: There are just too many ways for "breaking out" of a jail (in a weak sense) to check them all. Most of them derive from devfs misconfiguration. By instance you can easily panic the host system if /dev/mdctl is available inside the jail. The man page clearly states that devfs configuration is important. There's also a "default" devfs ruleset available for jails (check /etc/defaults/devfs.rules). Thank you for the report anyway http://www.freebsd.org/cgi/query-pr.cgi?pr=83297
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200605280816.k4S8Gx4C003350>