From owner-freebsd-security  Fri Jul 10 19:44:07 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id TAA13686
          for freebsd-security-outgoing; Fri, 10 Jul 1998 19:44:07 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from adk.gr (COREDUMP.CIS.UPENN.EDU [158.130.6.141])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA13681
          for <security@freebsd.org>; Fri, 10 Jul 1998 19:44:05 -0700 (PDT)
          (envelope-from angelos@dsl.cis.upenn.edu)
Received: from dsl.cis.upenn.edu ([198.223.41.41])
	by adk.gr (8.8.8/8.8.5) with ESMTP id WAA21195
	for <security@freebsd.org>; Fri, 10 Jul 1998 22:41:57 -0400 (EDT)
Message-Id: <199807110241.WAA21195@adk.gr>
To: security@FreeBSD.ORG
Subject: Re: chroot()
Date: Fri, 10 Jul 1998 22:35:19 EDT
From: "Angelos D. Keromytis" <angelos@dsl.cis.upenn.edu>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

-----BEGIN PGP SIGNED MESSAGE-----

To: security@freebsd.org
Subject: Re: chroot()
Cc:
Date: 07/10/98, 22:35:16


Keep in mind that it's trivial to escape from a root shell if you have
root (or can do certain things). chroot() is unfortunately far from
perfect.
- -Angelos

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface

iQCVAwUBNabPZb0pBjh2h1kFAQGspwP9E9e/NZp/QsBBlSge2BF61b4VsWS4qsdr
354LULHaTgpxGm4oNPyKZAsQ2PJz0/eK8B2jguH+ZPs04SwbJqqi1b+O64atJsrO
EjBteTFSAHa68+PeLJqF7u9Msc0VnoMCH0geC+B9RmJ/qaC4tT06RG241wTUu1eC
gbtxa2wneVc=
=/d1q
-----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message