From owner-freebsd-security@FreeBSD.ORG Wed May 11 10:06:43 2011 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C7A43106566C for ; Wed, 11 May 2011 10:06:43 +0000 (UTC) (envelope-from utisoft@gmail.com) Received: from mail-bw0-f54.google.com (mail-bw0-f54.google.com [209.85.214.54]) by mx1.freebsd.org (Postfix) with ESMTP id 4A7498FC14 for ; Wed, 11 May 2011 10:06:42 +0000 (UTC) Received: by bwz12 with SMTP id 12so414269bwz.13 for ; Wed, 11 May 2011 03:06:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:reply-to:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=pYa7Vhkg3FlMfEkxqQyQE75jAwWoectmL07Xu+z7P8w=; b=xp1EEcNrpQrsad7Bw68E1FS+3D8b81SFw3GHCWtxwUYc952+kd9DshI5O7DTvUyFDH Yp0u5Qgt6y8ApKoZcVM7lXd5gAfgrDU7YyDM+3ekTUG7jY1mtskh0b5fAZqvaWhzxfBa 18kroMMj1EzNVspqIRqdEWcmJUq7YwFWB7x8M= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; b=bYjZ/cUHt53cXsdnPtfCgZFxwgJdifDMbvzoulY9WuOFlG1wkXmJwjAtqr1paIkynm WI8LL7SePTcW+f/iq5+2U6vBY/TRfMQIfaALN3kv1N+dqPq842rIV3pqGo4pjY/b6a87 RTFMjuaDXUNW84a57kJ1Mm2QA+HtmLiJdna1Q= MIME-Version: 1.0 Received: by 10.204.41.16 with SMTP id m16mr1923191bke.151.1305108402040; Wed, 11 May 2011 03:06:42 -0700 (PDT) Received: by 10.204.42.21 with HTTP; Wed, 11 May 2011 03:06:41 -0700 (PDT) Received: by 10.204.42.21 with HTTP; Wed, 11 May 2011 03:06:41 -0700 (PDT) In-Reply-To: References: <20051.1305023864@critter.freebsd.dk> <86k4dy31v7.fsf@ds4.des.no> <20110510174910.64E48B827@mail.bitblocks.com> Date: Wed, 11 May 2011 11:06:41 +0100 Message-ID: From: Chris Rees To: Janne Snabb Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Jamie Landeg Jones , feld@feld.me, Edho P Arief , freebsd-security@freebsd.org, Poul-Henning Kamp , Bakul Shah , =?ISO-8859-1?Q?Dag=2DErling_Sm=F8rgrav?= Subject: Re: Rooting FreeBSD , Privilege Escalation using Jails (P??????tur) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: utisoft@gmail.com List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 May 2011 10:06:43 -0000 On 11 May 2011 06:28, "Janne Snabb" wrote: > > On Tue, 10 May 2011, Bakul Shah wrote: > > > Dumb question: the jail command can refuse to run unless the > > parent of a jail root is 0700. Would that work? No kernel hack > > required. > > I do not think that this should be enforced in kernel, in the jail(8) > command nor anywhere else. UNIX rm(1) is not opening a pop-up window > asking "are you sure?" if you do "rm -rf /". I suggest you test this assertion.... Chris