From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Thu 08 Jan 2004 - 20:25:28 GMT

• Previous message: Frank Matthieß: "Kernel capabilties (Was: [Vserver] Vserver and Security)"

Dear Vserver Community!

we discovered that there is a security issue
in all vserver versions, which will be solved
soon, but for now it would be best to mount
the procfs read only on your vserver host.

this can be done with:

 mount -o remount,ro /proc

if access to the procfs is required on the
host again (before a reboot, or for some other
configurations) you can remount the procfs
read-write again ...

 mount -o remount,rw /proc

as you can imagine, it has to do with write
access to specific proc entries from a vserver
context ...

best,
Herbert

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

• Previous message: Frank Matthieß: "Kernel capabilties (Was: [Vserver] Vserver and Security)"