Talk:Secure chroot Barrier
From Linux-VServer
Revision as of 21:49, 25 December 2006 by 213.192.14.138 (Talk)
- setattr --barrier /vservers
- showattr /vservers
Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..
Why? The fchdir.
Am I right?
once you gain root inside the scure chroot:
may you gain access to the device node?
i/o ports not restricted?
