Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Nov 2002 20:39:18 -0800
From:      David Schultz <dschultz@uclink.Berkeley.EDU>
To:        Julian Elischer <julian@FreeBSD.ORG>
Cc:        dillon@apollo.backplane.com, phk@critter.freebsd.dk, hackers@FreeBSD.ORG
Subject:   Re: tty/pty devices not safe in jail?
Message-ID:  <20021116043918.GA16104@HAL9000.homeunix.com>
In-Reply-To: <20021113201041.EA5F237B401@hub.freebsd.org>
References:  <98061.1037215858@critter.freebsd.dk> <20021113201041.EA5F237B401@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Thus spake Julian Elischer <julian@FreeBSD.ORG>:
> > There has always been code in kern/tty_pty.c which makes sure that the
> > master and slave have the same prison:
> 
> but a jailed user could perform a denial of service by using up all teh ptys.?

Can't you fix this by simply creating fewer device nodes inside
the jail, or by hiding some ptys in the devfs case?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021116043918.GA16104>