Re: [vserver] Are bind mounts to outside the /vserver base a security risk?

From: Guenther Fuchs <vserver_at_muh.at>
Date: Mon 19 Nov 2007 - 16:50:39 GMT
Message-ID: <154845976.20071119175039@fuchs.info>

Hi there,

on Thursday, November 1, 2007 at 2:52:34 PM there was posted:

EW> If I have my chroot barrier set on /vserver and then bind mount (for
EW> some reason) something from /var/xxx into a vserver, does this then
EW> offer an (accidental) way to break out of the chroot using some kind of
EW> ".." attack on the bind mount?

Not as far as I know.

-- 
regards 'n greez,
Guenther Fuchs
(aka "muh" and "powerfox")
Received on Mon Nov 19 16:57:33 2007
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 19 Nov 2007 - 16:57:38 GMT by hypermail 2.1.8