From: Olaf Titz <olaf@bigred.inka.de>
To: linux-kernel@vger.kernel.org
Subject: Re: chroot() breaks syslog() ?
Date: Mon, 04 Aug 2003 22:19:16 +0200 [thread overview]
Message-ID: <E19jlnZ-00023P-00@bigred.inka.de> (raw)
In-Reply-To: <20030804133307.GA4225@www.13thfloor.at>
> IMHO, devfs in chroot environment, is defeating the purpose
> because if you have access to raw devices, like the device
> your chroot dir is on, you can easily mount that device
> again, and voila you have access to the full tree, if you
You need to be root to mount the device, and as root you can also create
the device special file. A chroot environment does not reliably guard
against root breaking out of it.
Olaf
next prev parent reply other threads:[~2003-08-04 20:27 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-08-04 5:49 Steven Micallef
2003-08-04 5:34 ` Ben Collins
2003-08-04 6:12 ` David Lang
2003-08-04 8:40 ` Wichert Akkerman
2003-08-04 13:33 ` Herbert Pötzl
2003-08-04 20:19 ` Olaf Titz [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-08-06 13:34 Oliver Pitzeier
2003-08-06 8:42 Oliver Pitzeier
2003-08-06 11:08 ` Herbert Pötzl
2003-08-04 7:30 Steven Micallef
2003-08-04 5:27 Steven Micallef
2003-08-04 5:19 ` Ben Collins
2003-08-04 7:23 ` Torsten Foertsch
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=E19jlnZ-00023P-00@bigred.inka.de \
--to=olaf@bigred.inka.de \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®