http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&feed=atom&action=historySecure chroot Barrier - Revision history2024-03-28T20:21:56ZRevision history for this page on the wikiMediaWiki 1.20.2http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=4831&oldid=prevGlenn: spelling2011-10-21T19:00:11Z<p>spelling</p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 19:00, 21 October 2011</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 330:</td>
<td colspan="2" class="diff-lineno">Line 330:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>[[Category:<del class="diffchange diffchange-inline">Documentaion</del>]]</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>[[Category:<ins class="diffchange diffchange-inline">Documentation</ins>]]</div></td></tr>
</table>Glennhttp://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=4814&oldid=prevGlenn: +cat2011-10-21T18:53:16Z<p>+cat</p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 18:53, 21 October 2011</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 329:</td>
<td colspan="2" class="diff-lineno">Line 329:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">[[Category:Documentaion]]</ins></div></td></tr>
</table>Glennhttp://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=3909&oldid=prevDaniel hozac: Undo revision 3900 by 193.231.72.8 (Talk)2009-09-16T01:29:47Z<p>Undo revision 3900 by <a href="/Special:Contributions/193.231.72.8" title="Special:Contributions/193.231.72.8">193.231.72.8</a> (<a href="/index.php?title=User_talk:193.231.72.8&action=edit&redlink=1" class="new" title="User talk:193.231.72.8 (page does not exist)">Talk</a>)</p>
<a href="http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=3909&oldid=3900">Show changes</a>Daniel hozachttp://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=3900&oldid=prev193.231.72.8: /* Breakout Methods */2009-09-15T11:26:08Z<p><span dir="auto"><span class="autocomment">Breakout Methods</span></span></p>
<a href="http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=3900&oldid=3207">Show changes</a>193.231.72.8http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=3207&oldid=prev87.234.233.194: changing filesystem <-> mountpoint in my understanding2008-08-01T16:19:03Z<p>changing filesystem <-> mountpoint in my understanding</p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 16:19, 1 August 2008</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 319:</td>
<td colspan="2" class="diff-lineno">Line 319:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>If you keep all the guests in one <del class="diffchange diffchange-inline">filesystem</del>, setting the barrier on /vservers is enough, otherwise it should be repeated for each mount point.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>If you keep all the guests in one <ins class="diffchange diffchange-inline">mountpoint</ins>, setting the barrier on /vservers is enough, otherwise it should be repeated for each mount point.</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>If you want to be safe you may choose to just set the barrier for each individual guest, for example:</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>If you want to be safe you may choose to just set the barrier for each individual guest, for example:</div></td></tr>
</table>87.234.233.194http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=2987&oldid=prev87.234.233.194: /* Solution: Secure Barrier */2008-02-28T20:12:59Z<p><span dir="auto"><span class="autocomment">Solution: Secure Barrier</span></span></p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 20:12, 28 February 2008</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 319:</td>
<td colspan="2" class="diff-lineno">Line 319:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div><del class="diffchange diffchange-inline">''(note: strictly speaking this is incorrect</del>, <del class="diffchange diffchange-inline">instead one wants to do <tt>setattr --</del>barrier /<del class="diffchange diffchange-inline">path/to/guest/..</tt> for all guests</del>, <del class="diffchange diffchange-inline">which can </del>be <del class="diffchange diffchange-inline">quite different from the above, even </del>for <del class="diffchange diffchange-inline">guests in /vservers *Bertl*)''</del></div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">If you keep all the guests in one filesystem</ins>, <ins class="diffchange diffchange-inline">setting the </ins>barrier <ins class="diffchange diffchange-inline">on </ins>/<ins class="diffchange diffchange-inline">vservers is enough</ins>, <ins class="diffchange diffchange-inline">otherwise it should </ins>be <ins class="diffchange diffchange-inline">repeated </ins>for <ins class="diffchange diffchange-inline">each mount point.</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>'' Please note that the ".." <del class="diffchange diffchange-inline">at the end of the </del>/path/to/guest/<del class="diffchange diffchange-inline">.. has to be present</del>''</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">If you want to be safe you may choose to just set the barrier for each individual guest, for example:</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline"><pre></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">cd -P /etc/vservers/<guest>/vdir; setattr --barrier ..</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline"></pre></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div> </div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>'' Please note that <ins class="diffchange diffchange-inline">it's important to set </ins>the <ins class="diffchange diffchange-inline">barrier against </ins>".." <ins class="diffchange diffchange-inline">inside </ins>/path/to/guest/ ''</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td></tr>
</table>87.234.233.194http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=2778&oldid=prev208.71.184.41: /* Solution: Secure Barrier */2007-10-03T14:23:46Z<p><span dir="auto"><span class="autocomment">Solution: Secure Barrier</span></span></p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 14:23, 3 October 2007</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 320:</td>
<td colspan="2" class="diff-lineno">Line 320:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: strictly speaking this is incorrect, instead one wants to do <tt>setattr --barrier /path/to/guest/..</tt> for all guests, which can be quite different from the above, even for guests in /vservers *Bertl*)''</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: strictly speaking this is incorrect, instead one wants to do <tt>setattr --barrier /path/to/guest/..</tt> for all guests, which can be quite different from the above, even for guests in /vservers *Bertl*)''</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">'' Please note that the ".." at the end of the /path/to/guest/.. has to be present''</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</div></td></tr>
</table>208.71.184.41http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=2700&oldid=prev193.2.208.9: /* Solution: Secure Barrier */2007-09-04T13:27:55Z<p><span dir="auto"><span class="autocomment">Solution: Secure Barrier</span></span></p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 13:27, 4 September 2007</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 315:</td>
<td colspan="2" class="diff-lineno">Line 315:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div># setattr --barrier /vservers</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div># setattr --barrier /vservers</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div># showattr /vservers</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div># showattr /vservers</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">---Bui- /vservers</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">---bui- /vservers/pasat</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: strictly speaking this is incorrect, instead one wants to do <tt>setattr --barrier /path/to/guest/..</tt> for all guests, which can be quite different from the above, even for guests in /vservers *Bertl*)''</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>''(note: strictly speaking this is incorrect, instead one wants to do <tt>setattr --barrier /path/to/guest/..</tt> for all guests, which can be quite different from the above, even for guests in /vservers *Bertl*)''</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">''(note: <tt>---Bui-</tt> barrier set, <tt>---bui-</tt> barrier available and not set)''</ins></div></td></tr>
</table>193.2.208.9http://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=2620&oldid=prevBertl: /* Solution: Secure Barrier */2007-07-18T21:33:37Z<p><span dir="auto"><span class="autocomment">Solution: Secure Barrier</span></span></p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 21:33, 18 July 2007</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 316:</td>
<td colspan="2" class="diff-lineno">Line 316:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div># showattr /vservers</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div># showattr /vservers</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div></pre></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">''(note: strictly speaking this is incorrect, instead one wants to do <tt>setattr --barrier /path/to/guest/..</tt> for all guests, which can be quite different from the above, even for guests in /vservers *Bertl*)''</ins></div></td></tr>
</table>Bertlhttp://linux-vserver.org/index.php?title=Secure_chroot_Barrier&diff=2355&oldid=prevDaniel hozac: remove superfluous {2007-02-24T18:55:04Z<p>remove superfluous {</p>
<table class='diff diff-contentalign-left'>
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 18:55, 24 February 2007</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 57:</td>
<td colspan="2" class="diff-lineno">Line 57:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> }</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> }</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> </div></td></tr>
<tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div> if (chroot(".") != 0) <del class="diffchange diffchange-inline">{</del></div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div> if (chroot(".") != 0)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> die("chroot(.)");</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> die("chroot(.)");</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> </div></td></tr>
</table>Daniel hozac