From owner-freebsd-security@FreeBSD.ORG Wed Jan 12 00:27:02 2005 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 33B1516A4CE for ; Wed, 12 Jan 2005 00:27:02 +0000 (GMT) Received: from micah.tamu.edu (micah.tamu.edu [128.194.177.23]) by mx1.FreeBSD.org (Postfix) with ESMTP id D9A6243D45 for ; Wed, 12 Jan 2005 00:27:01 +0000 (GMT) (envelope-from micah@micah.tamu.edu) Received: from micah.tamu.edu (micah.tamu.edu [128.194.177.23]) by micah.tamu.edu (8.13.1/8.13.1) with ESMTP id j0C0Z9u8052820 for ; Tue, 11 Jan 2005 18:35:09 -0600 (CST) (envelope-from micah@micah.tamu.edu) Received: (from micah@localhost) by micah.tamu.edu (8.13.1/8.13.1/Submit) id j0C0Z8PC052819 for freebsd-security@freebsd.org; Tue, 11 Jan 2005 18:35:08 -0600 (CST) (envelope-from micah) Date: Wed, 12 Jan 2005 00:35:08 +0000 From: Micah To: freebsd-security@freebsd.org Message-ID: <20050112003508.GE68350@micah.tamu.edu> References: <20050111221055.GD68350@micah.tamu.edu> <24203.1105481143@critter.freebsd.dk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <24203.1105481143@critter.freebsd.dk> User-Agent: Mutt/1.4.2.1i Subject: Re: Possible security issue with jails X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Jan 2005 00:27:02 -0000 This was the info I needed. Thanks! -micah On Tue, Jan 11, 2005 at 11:05:43PM +0100, Poul-Henning Kamp wrote: > In message <20050111221055.GD68350@micah.tamu.edu>, Micah writes: > >Howdy! > > > >I'm not sure if this is actually an issue, feature or a bug, but I have found > >that inside a jail, the jailed root user is able to sniff traffic (and enable > >promiscuous mode) on at least the interface of the IP address the jail is attached > >to. > > Only if you leave bpf devices in the devfs mounted on the jail. > > -- > Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 > phk@FreeBSD.ORG | TCP/IP since RFC 956 > FreeBSD committer | BSD since 4.3-tahoe > Never attribute to malice what can adequately be explained by incompetence. > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"