Talk:Secure chroot Barrier: Difference between revisions

From Linix VServer
Jump to navigationJump to search
No edit summary
 
No edit summary
Line 7: Line 7:


Am I right?
Am I right?
once you gain root inside the scure chroot:
may you gain access to the device node?
i/o ports not restricted?

Revision as of 20:49, 25 December 2006

  1. setattr --barrier /vservers
  2. showattr /vservers

Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..

Why? The fchdir.

Am I right?

once you gain root inside the scure chroot:

may you gain access to the device node?

i/o ports not restricted?