From owner-freebsd-security Wed Dec 23 23:20:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA24236 for freebsd-security-outgoing; Wed, 23 Dec 1998 23:20:21 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from goliath.camtech.net.au (goliath.camtech.net.au [203.5.73.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA24210 for ; Wed, 23 Dec 1998 23:20:10 -0800 (PST) (envelope-from newton@camtech.com.au) Received: from sebastion.sa.camtech.com.au (sebastion.sa.camtech.com.au [203.28.3.2]) by goliath.camtech.net.au (8.8.5/8.8.2) with ESMTP id RAA28396; Thu, 24 Dec 1998 17:43:40 +1030 (CST) Received: (from smtp@localhost) by sebastion.sa.camtech.com.au (8.8.5/8.8.7) id RAA01717; Thu, 24 Dec 1998 17:44:31 +1030 (CST) Received: from slingshot(192.168.1.2) by sebastion via smap (V2.0) id xma001713; Thu, 24 Dec 98 17:44:15 +1030 Received: from frenzy.ct (newton@frenzy.ct [192.168.4.65]) by slingshot.ct (8.9.1/8.9.1) with ESMTP id RAA10288; Thu, 24 Dec 1998 17:44:03 +1030 (CST) From: Mark Newton Received: (from newton@localhost) by frenzy.ct (8.8.8/8.8.8) id RAA17322; Thu, 24 Dec 1998 17:44:02 +1030 (CDT) Message-Id: <199812240714.RAA17322@frenzy.ct> Subject: Re: About chroot In-Reply-To: From newton at "Dec 24, 98 09:45:56 am" To: newton@camtech.com.au (newton) Date: Thu, 24 Dec 1998 17:44:02 +1030 (CDT) Cc: eivind@yes.no, casper@acc.am, freebsd-security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL32 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Replying to my own mail: > I have a patch which completely disables chroot() for processes which > have already been chroot()'ed (by making chroot() fail with EPERM > if the process' root directory is not the same as init's root directory > whether it's being called by the superuser or not). I've submitted the patch; It's kern/9183. Does anyone want to review it? I'll commit it if there's a positive response (but won't if there's no response). - mark --- Mark Newton Email: newton@camtech.com.au Systems Engineer and Senior Trainer Phone: +61-8-8303-3300 Camtech (SA), a member of the Fax: +61-8-8303-4403 CAMTECH group of companies WWW: http://www.camtech.com.au To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message