Date: Tue, 10 May 2011 12:28:28 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Jason Hellenthal <jhell@DataIX.net> Cc: Jamie Landeg Jones <jamie@bishopston.net>, freebsd-security@freebsd.org, feld@feld.me, Edho P Arief <edhoprima@gmail.com>, utisoft@gmail.com Subject: Re: Rooting FreeBSD , Privilege Escalation using Jails (P??????tur) Message-ID: <86zkmu26k3.fsf@ds4.des.no> In-Reply-To: <20110509144947.GB77054@DataIX.net> (Jason Hellenthal's message of "Mon, 9 May 2011 10:49:47 -0400") References: <op.vu2g4b0k34t2sn@tech304> <BANLkTikJgPt4SM_B_7drpgFvO8RkvXaOtw@mail.gmail.com> <201105072231.p47MVktY035491@catflap.bishopston.net> <BANLkTikgnqXB4pdvCd9j9n7pFvg=n5FrdQ@mail.gmail.com> <20110508075203.GA61754@DataIX.net> <BANLkTi=8by=rtbNUDtA8CRSMJsmgPOR2XA@mail.gmail.com> <20110508173931.GA2757@DataIX.net> <86fwoof8lj.fsf@ds4.des.no> <BANLkTi=-0=L0MmezOCa=tiv6DrwHYZ83AQ@mail.gmail.com> <86zkmwdpdl.fsf@ds4.des.no> <20110509144947.GB77054@DataIX.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Jason Hellenthal <jhell@DataIX.net> writes: > Do you know if there is a way that chmod on / from within the jail could= =20 > be prevented easily without breaking something ? Maybe not failing but=20 > falling though and return 0 for any operation with the sole argument of /. Not without adding explicit checks in the kernel. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86zkmu26k3.fsf>