From: "Marco d'Itri" <md@Linux.IT>
To: Alexander Viro <viro@math.psu.edu>
Cc: linux-kernel@vger.kernel.org
Subject: Re: [PATCH][CFT] per-process namespaces for Linux
Date: Mon, 26 Feb 2001 12:54:57 +0100 [thread overview]
Message-ID: <20010226125457.F1646@wonderland.linux.it> (raw)
In-Reply-To: <20010226005103.V18271@almesberger.net> <Pine.GSO.4.21.0102251910070.26808-100000@weyl.math.psu.edu>
In-Reply-To: <Pine.GSO.4.21.0102251910070.26808-100000@weyl.math.psu.edu>; from viro@math.psu.edu on Sun, Feb 25, 2001 at 07:26:24PM -0500
On Feb 26, Alexander Viro <viro@math.psu.edu> wrote:
>There is no way to implement them without credentials' cache. Which needs
>to be done for many other reasons, but that's a separate patch and
>separate story. If it's done - no serious penalty involved. However,
>I doubt that we want a union on / itself. /dev - sure, /bin and /lib -
>maybe, but /... What for?
What I'd really like to do is remount / somewhere with mount --bind,
mount over it another skeleton file system which hides setuid programs
and some directories and then run a chrooted sshd in the new root.
If I'm not missing something, this would make creation of secure chroot
environments very easy.
>Tomorrow I'll try to catch Erik and talk with him about that. I'm not sure
>that I know anyone in Debian Install System Team (oh, boy... somebody sure
Just write to debian-boot@lists.debian.org.
--
ciao,
Marco
next prev parent reply other threads:[~2001-02-26 14:28 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-02-25 10:44 Manfred Spraul
2001-02-25 16:04 ` Alexander Viro
2001-02-25 19:01 ` Sandy Harris
2001-02-25 19:13 ` Alexander Viro
2001-02-25 21:57 ` Werner Almesberger
2001-02-25 22:39 ` Alexander Viro
2001-02-25 23:51 ` Werner Almesberger
2001-02-26 0:26 ` Alexander Viro
2001-02-26 11:54 ` Marco d'Itri [this message]
2001-02-26 12:51 ` Alexander Viro
2001-02-26 16:43 ` Alexander Viro
2001-02-27 20:08 ` Alexander Viro
2001-02-28 7:03 ` Albert D. Cahalan
2001-02-28 7:14 ` Alexander Viro
2001-02-28 18:13 ` David L. Parsley
2001-02-28 18:07 ` Alexander Viro
2001-02-28 19:06 ` Ion Badulescu
2001-02-28 19:18 ` Alexander Viro
2001-02-28 20:17 ` Ion Badulescu
2001-02-28 7:51 ` Alexander Viro
2001-02-25 19:48 ` Arjan van de Ven
2001-02-27 9:50 ` David Woodhouse
-- strict thread matches above, loose matches on Subject: below --
2001-02-26 1:14 Andries.Brouwer
2001-02-26 1:39 ` Alexander Viro
2001-02-25 5:28 Rick Hohensee
2001-02-25 5:40 ` Alexander Viro
2001-02-25 4:16 Alexander Viro
2001-02-26 16:26 ` Peter J. Braam
2001-02-26 20:23 ` Christoph Hellwig
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20010226125457.F1646@wonderland.linux.it \
--to=md@linux.it \
--cc=linux-kernel@vger.kernel.org \
--cc=viro@math.psu.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®