Re: [vserver] [Grsec] audit denies pivot_root ?

From: Rik Bobbaers <rik_at_enzoverder.be>
Date: Tue 23 Nov 2010 - 12:40:43 GMT
Message-ID: <4385.193.178.209.214.1290516043.squirrel@www.enzoverder.be>

> Le 23 nov. 2010 à 10:52, Rik Bobbaers a écrit :
>>>
>>> True. I am usually more interested in the PaX features, but during
>>> testing, this behaviour striked me as odd ... as you said, *audit*
>>> should
>>> not block anything, yet it does, and this is quite unnerving.
>>> Anything I can do to help investigate ?
>>>
>>> Cheers,
>>>
>>> Romain
>>
>> hehe... aside from looking at the grsec code that does the auditting
>> etc... no ;)
>>
>> I'll try to schedule some time in to investigate this further, but i'm
>> rather short on time lately :(
>
> I know the feeling, far from me the idea of holding a grudge against you
> :-)
> I'll try with PaX only and see if I still get these general protection
> faults, otherwise it will be plain VServer.
>
> Cheers !
>
> Romain

why not just disable chroot restrictions and leave the rest on?

Rik Bobbaers

-- http://harry.enzoverder.be
linux/unix/system/network/security/hardware admin
infrastructure architect
Received on Tue Nov 23 12:40:35 2010

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 23 Nov 2010 - 12:40:36 GMT by hypermail 2.1.8