Date: Mon, 27 Sep 1999 15:40:24 -0500 From: Carol Deihl <carol@tinker.com> To: Poul-Henning Kamp <phk@critter.freebsd.dk> Cc: Julian Elischer <julian@whistle.com>, freebsd-security@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG Subject: Re: chroot could chdir? (was Re: about jail) Message-ID: <37EFD638.528A5C9@tinker.com> References: <19097.938417784@critter.freebsd.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
Poul-Henning Kamp wrote:
>
> In message <Pine.BSF.4.05.9909270029300.27653-100000@home.elischer.org>, Julian Elischer writes:
> >I read it as her talking about chroot in general.
Yep, I was.
> We do. See source. :-)
Are you talking about the new jail() call only, or does this
apply to chroot() (especially in 3.2) ?
(And I am looking in the source now, I'm just not too
familiar with it... :-) )
Carol
> >> >You have to examine ALL fd's in case one has a directory open that is
> >> >outside the chroot..
> >> >(see man fchdir(2))
> >>
> >> We do. See source.
--
Carol Deihl - principal, Shrier and Deihl - mailto:carol@tinker.com
Remote Unix Network Admin, Security, Internet Software Development
Tinker Internet Services - Superior FreeBSD-based Web Hosting
http://www.tinker.com/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?37EFD638.528A5C9>