About this list Date view Thread view Subject view Author view Attachment view

From: Enrico Scholz (enrico.scholz_at_informatik.tu-chemnitz.de)
Date: Thu 09 Sep 2004 - 07:27:57 BST


hhml_at_zweipol.net (Henrik Heil) writes:

> 1) Chroot Barrier Flag
>
> http://www-user.tu-chemnitz.de/~ensc/util-vserver/doc/lt2004/paper.html#fig:rmattack
>
> ---8<---
> Die Anfälligkeit gegen Symlinkattacken und andere Races ist ein
> weiterer Nachteil des stable Branches, weshalb vom Einsatz in
> feindlichen Umgebungen wie root-Server für Kunden abzuraten ist.
> --->8---
>
> Is this still true -- does this mean that i cannot use the stable
> branch in a possible hostile production environment?

This applies to the stable branch of the userspace utilities only. I am
not aware about non-DOS security problems in the kernel level (except
the /proc stuff, but this should not be a problem when sysrq-support is
disabled and no SCSI drives in use).

Enrico
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 09 Sep 2004 - 07:28:14 BST by hypermail 2.1.3