About this list Date view Thread view Subject view Author view Attachment view

From: Michael Hilscher (mail_at_msh-webservice.de)
Date: Fri 16 Apr 2004 - 14:14:55 BST


Am 16.04.2004 um 13:31 schrieb Nicholas E. Walker:
> It may be worth noting that if /proc/acpi/sleep is available within a
> vserver, one can 'echo -n 5 > /proc/acpi/sleep' to immediately power
> off
> the host system. Please sync your disks before experimenting ;-)
well in my server is no /proc/acpi dir available. But i do think same as
<Bertl> my motto is, do not enable, what you do not need </Bertl>
so an vproc -d `find /proc` solves this for me.

But if there are dangerous /proc entries than it means that vserver
stable is vulnerable because vproc is neither included in util-vserver
(stable) nor set all entrys to hidden by default.

greetinXs,
Michael Hilscher

--
Would Mozart have been more productive if he had scribes to help him, a
secretary and a CEO to lead his way? -- Linus Torvalds

_______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 16 Apr 2004 - 14:17:41 BST by hypermail 2.1.3