From owner-freebsd-hackers@FreeBSD.ORG  Mon Oct  4 01:38:21 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9AE0A16A4CE
	for <freebsd-hackers@freebsd.org>;
	Mon,  4 Oct 2004 01:38:21 +0000 (GMT)
Received: from harmony.village.org (rover.village.org [168.103.84.182])
	by mx1.FreeBSD.org (Postfix) with ESMTP id ED81943D41
	for <freebsd-hackers@freebsd.org>;
	Mon,  4 Oct 2004 01:38:20 +0000 (GMT)	(envelope-from imp@bsdimp.com)
Received: from localhost (harmony.village.org [10.0.0.6])
	by harmony.village.org (8.13.1/8.13.1) with ESMTP id i941c0ZF082137;
	Sun, 3 Oct 2004 19:38:00 -0600 (MDT)
	(envelope-from imp@bsdimp.com)
Date: Sun, 03 Oct 2004 19:39:32 -0600 (MDT)
Message-Id: <20041003.193932.78732524.imp@bsdimp.com>
To: des@des.no
From: "M. Warner Losh" <imp@bsdimp.com>
In-Reply-To: <xzpmzz3a6dj.fsf@dwp.des.no>
References: <20041003030946.GV35869@seekingfire.com>
	<20041003.113739.95785967.imp@bsdimp.com>
	<xzpmzz3a6dj.fsf@dwp.des.no>
X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
cc: freebsd-hackers@freebsd.org
Subject: Re: Protection from the dreaded "rm -fr /"
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Oct 2004 01:38:21 -0000

In message: <xzpmzz3a6dj.fsf@dwp.des.no>
            des@des.no (Dag-Erling Sm=F8rgrav) writes:
: "M. Warner Losh" <imp@bsdimp.com> writes:
: > rm doesn't have to live in the chroot.  Consider
: > 	chroot /some/path/to/a/chroot rm -rf /
: > in this case, everything under the /some/path/to/a/chroot would be
: > removed.  However, the rm that's running is outside of the chroot.
: =

: Wrong, and I'd be interested to hear how you think chroot(8) would
: pull that off if it were the case.

I was confused.

Warner