From owner-freebsd-questions  Thu Oct 18  1:49:31 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-3.dsl.lsan03.pacbell.net [63.207.60.3])
	by hub.freebsd.org (Postfix) with ESMTP id 5AD3837B40A
	for <questions@FreeBSD.ORG>; Thu, 18 Oct 2001 01:49:25 -0700 (PDT)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id E9CF866B0E; Thu, 18 Oct 2001 01:49:24 -0700 (PDT)
Date: Thu, 18 Oct 2001 01:49:24 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Hanno Liem <freebsd@dark4ce.com>
Cc: FreeBSD <freebsd@XtremeDev.com>, questions@FreeBSD.ORG
Subject: Re: To jail or not to jail, that is the question
Message-ID: <20011018014924.B42500@xor.obsecurity.org>
References: <20011018022457.P1810-100000@Amber.XtremeDev.com> <20011018104441.F85163@dark4ce.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="PmA2V3Z32TCmWXqI"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20011018104441.F85163@dark4ce.com>; from freebsd@dark4ce.com on Thu, Oct 18, 2001 at 10:44:41AM +0200
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--PmA2V3Z32TCmWXqI
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Oct 18, 2001 at 10:44:41AM +0200, Hanno Liem wrote:
> Oops, the article on jail security was not on Daemonnews but here:
>=20
> http://www.bsdtoday.com/2000/December/Security374.html

No.

That article explains how to break out of a jail using certain types
of FreeBSD kernel security vulnerabilities.  It doesn't describe
security vulnerabilities in the jail code, and whenever we find a
kernel vulnerability in FreeBSD we immediately fix it.

Kris

--PmA2V3Z32TCmWXqI
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7zpeUWry0BWjoQKURApzfAKCZaQ3mG+ORX/DSjCqDaosu648sWACfcs2Z
Ld6wCHH45MTEDHdJ5mwk1/c=
=7Rsq
-----END PGP SIGNATURE-----

--PmA2V3Z32TCmWXqI--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message