Difference between revisions of "Talk:Secure chroot Barrier"

From Linux-VServer

Jump to: navigation, search
(Billige Supra Justin Bieber Sko: new section)
(Pump cavitation: new section)
(5 intermediate revisions by 3 users not shown)
Line 18: Line 18:
 
# Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please
 
# Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please
  
== Billige Supra Justin Bieber Sko ==
+
== Pump cavitation ==
  
http://nikeskoene.com/  Supra Skytop III Sko,Supra Skytop Sko,Supra TK Society
+
Pump cavitation is one of the most befuddling problems plant engineers can face. The literature on the subject can be quite technical, some of it misleading, and much of it offers limited practical guidance on how to get rid of the problem. Worse yet, there are different types of cavitation, and different definitions of “acceptable” suction condition http://bouldencompany.com/blog/tags/Loss+of+pump+efficiency
http://nikeskoene.com/ Supra TK Society Sko Barn,Supra Barnsko,Supra Damesko
+

Revision as of 06:11, 11 January 2013

  1. setattr --barrier /vservers
  2. showattr /vservers
  • NOTE: when setting xattrs on reiserfs, please not that the filesystem has to be mounted explicitly with 'attrs' option, i.e.: mount /dev/reiserfsdev /vservers -oattrs to get the barrier survive after umount/reboot.

Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..

Why? The fchdir.

Am I right?

once you gain root inside the scure chroot:

may you gain access to the device node?

i/o ports not restricted?


  1. Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please

Pump cavitation

Pump cavitation is one of the most befuddling problems plant engineers can face. The literature on the subject can be quite technical, some of it misleading, and much of it offers limited practical guidance on how to get rid of the problem. Worse yet, there are different types of cavitation, and different definitions of “acceptable” suction condition http://bouldencompany.com/blog/tags/Loss+of+pump+efficiency

Personal tools