http://linux-vserver.org/api.php?action=feedcontributions&user=213.192.14.138&feedformat=atomLinux-VServer - User contributions [en]2024-03-28T12:24:03ZUser contributionsMediaWiki 1.20.2http://linux-vserver.org/Talk:Secure_chroot_BarrierTalk:Secure chroot Barrier2006-12-25T20:49:10Z<p>213.192.14.138: </p>
<hr />
<div># setattr --barrier /vservers<br />
# showattr /vservers<br />
<br />
Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..<br />
<br />
Why? The fchdir.<br />
<br />
Am I right?<br />
<br />
once you gain root inside the scure chroot:<br />
<br />
may you gain access to the device node?<br />
<br />
i/o ports not restricted?</div>213.192.14.138http://linux-vserver.org/Talk:Secure_chroot_BarrierTalk:Secure chroot Barrier2006-12-25T20:44:47Z<p>213.192.14.138: </p>
<hr />
<div># setattr --barrier /vservers<br />
# showattr /vservers<br />
<br />
Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..<br />
<br />
Why? The fchdir.<br />
<br />
Am I right?</div>213.192.14.138