Re: Chroot bug

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

From: Jiri Kosina

Date: Thursday, September 27, 2007 - 6:49 am

On Wed, 26 Sep 2007, Miloslav Semler wrote:

quoted text> so there is no discussion about mount & others. I think, if you have 
> CAP_SYS_MOUNT/CAP_SYS_ADMIN, you need not solve chroot() and how to 
> break it.

CAP_SYS_PTRACE allows you to break out of chroot in a pretty trivial way 
too.

-- 
Jiri Kosina
-
unsubscribe noticeTo unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

Re: sys_chroot+sys_fchdir Fix, Bodo Eggert, (Thu Sep 20, 4:13 am)

Re: sys_chroot+sys_fchdir Fix, Philipp Marek, (Thu Sep 20, 4:59 am)

Re: sys_chroot+sys_fchdir Fix, majkls, (Thu Sep 20, 5:52 am)

Re: sys_chroot+sys_fchdir Fix, David Newall, (Thu Sep 20, 9:06 am)

Re: sys_chroot+sys_fchdir Fix, Philipp Marek, (Thu Sep 20, 9:17 am)

Re: sys_chroot+sys_fchdir Fix, David Newall, (Thu Sep 20, 11:02 am)

Re: sys_chroot+sys_fchdir Fix, Bill Davidsen, (Thu Sep 20, 1:53 pm)

Re: sys_chroot+sys_fchdir Fix, David Newall, (Fri Sep 21, 1:29 am)

Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Mon Sep 24, 2:32 pm)

Re: sys_chroot+sys_fchdir Fix, David Newall, (Mon Sep 24, 3:04 pm)

Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Mon Sep 24, 4:00 pm)

Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Mon Sep 24, 4:02 pm)

Re: sys_chroot+sys_fchdir Fix, David Newall, (Tue Sep 25, 12:45 am)

Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Tue Sep 25, 4:49 am)

Re: sys_chroot+sys_fchdir Fix, David Newall, (Tue Sep 25, 6:58 am)

Chroot bug (was: sys_chroot+sys_fchdir Fix), David Newall, (Tue Sep 25, 8:10 am)

Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Jan Engelhardt, (Tue Sep 25, 8:20 am)

Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Alan Cox, (Tue Sep 25, 8:30 am)

Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Adrian Bunk, (Tue Sep 25, 8:32 am)

Re: Chroot bug, David Newall, (Tue Sep 25, 8:35 am)

Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 8:39 am)

Re: Chroot bug, David Newall, (Tue Sep 25, 8:41 am)

Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 8:43 am)

Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 8:47 am)

Re: Chroot bug, Alan Cox, (Tue Sep 25, 8:48 am)

Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 8:48 am)

Re: Chroot bug, Adrian Bunk, (Tue Sep 25, 9:02 am)

Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 9:19 am)

Re: Chroot bug, Arjan van de Ven, (Tue Sep 25, 9:33 am)

Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 9:52 am)

Re: Chroot bug, Serge E. Hallyn, (Tue Sep 25, 9:53 am)

Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 10:00 am)

Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 10:05 am)

Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 10:09 am)

Re: Chroot bug, Al Viro, (Tue Sep 25, 10:09 am)

Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 10:19 am)

Re: Chroot bug, David Newall, (Tue Sep 25, 1:51 pm)

Re: Chroot bug, David Newall, (Tue Sep 25, 4:50 pm)

Re: Chroot bug, Alan Cox, (Tue Sep 25, 5:18 pm)

Re: Chroot bug, Adrian Bunk, (Tue Sep 25, 5:55 pm)

Re: Chroot bug, Kyle Moffett, (Tue Sep 25, 10:21 pm)

Re: Chroot bug, Willy Tarreau, (Tue Sep 25, 10:25 pm)

Re: Chroot bug, David Newall, (Wed Sep 26, 3:24 am)

Re: Chroot bug, David Newall, (Wed Sep 26, 3:27 am)

Re: Chroot bug, Olivier Galibert, (Wed Sep 26, 3:45 am)

Re: Chroot bug, Alan Cox, (Wed Sep 26, 3:47 am)

Re: Chroot bug, David Newall, (Wed Sep 26, 4:06 am)

Re: Chroot bug, David Newall, (Wed Sep 26, 4:13 am)

Re: Chroot bug, Alan Cox, (Wed Sep 26, 4:20 am)

Re: Chroot bug, Kyle Moffett, (Wed Sep 26, 5:54 am)

Re: Chroot bug, Miloslav Semler, (Wed Sep 26, 6:11 am)

Re: Chroot bug, Bongani Hlope, (Wed Sep 26, 6:13 am)

Re: Chroot bug, linux-os (Dick Johnson), (Wed Sep 26, 6:18 am)

Re: Chroot bug, Al Viro, (Wed Sep 26, 6:42 am)

Re: Chroot bug, Kyle Moffett, (Wed Sep 26, 7:02 am)

Re: Chroot bug, Miloslav Semler, (Wed Sep 26, 7:51 am)

Re: Chroot bug, Miloslav Semler, (Wed Sep 26, 8:01 am)

Re: Chroot bug, Olivier Galibert, (Wed Sep 26, 8:02 am)

Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Bodo Eggert, (Wed Sep 26, 12:23 pm)

Re: Chroot bug, Jiri Kosina, (Thu Sep 27, 6:49 am)


linux-kernel:
Mel Gorman	Re: [PATCH 1/4] vmstat: remove zone->lock from walk_zones_in_node
Guenter Roeck	Re: [lm-sensors] Location for thermal drivers
David Woodhouse	Re: RFC: Moving firmware blobs out of the kernel.
Siddha, Suresh B	Re: [PATCH 2.6.21 review I] [11/25] x86: default to physical mode on hotplug CPU k...
Peter Zijlstra	Re: [patch 4/6] mm: merge populate and nopage into fault (fixes nonlinear)
git-commits-head:
Linux Kernel Mailing List	[MIPS] Fix potential latency problem due to non-atomic cpu_wait.
Linux Kernel Mailing List	USB: rename USB_SPEED_VARIABLE to USB_SPEED_WIRELESS
Linux Kernel Mailing List	lib/vsprintf.c: fix bug omitting minus sign of numbers (module_param)
Linux Kernel Mailing List	[Bluetooth] Initiate authentication during connection establishment
Linux Kernel Mailing List	[POWERPC] 4xx: Add ppc40x_defconfig
linux-netdev:
MERCEDES	Your mail id has won 950,000.00 in the MERCEDES Benz Online Promo.for claims send:
David Miller	Re: [PATCH] xen/netfront: do not mark packets of length < MSS as GSO
David Miller	Re: skb_segment() questions
Shan Wei	[RFC PATCH net-next 2/5]IPv6:netfilter: Send an ICMPv6 "Fragment Reassembly Timeou...
Stanislaw Gruszka	[PATCH 1/4] bnx2x: use smp_mb() to keep ordering of read write operations
git:
Nicolas Sebrecht	git-svn died of signal 11 (was "3 failures on test t9100 (svn)")
Junio C Hamano	Re: [PATCH 2/2] Add url.<base>.pushInsteadOf: URL rewriting for push only
Martin Langhoff	Re: [PATCH] GIT commit statistics.
Alexandre Julliard	[PATCH] gitweb: Put back shortlog instead of graphiclog in the project list.
Josh Triplett	[PATCH 2/2] Add url.<base>.pushInsteadOf: URL rewriting for push only
openbsd-misc:
Taisto Qvist XX	Re: AMD GEODE LX-800 just works with kernel from install42.iso and kernelpanics wi...
Nico Meijer	Re: gOS Develop Kit with VIA pc-1 Processor Platform VIA C7-D
Andreas Bihlmaier	Re: jetway board sensors (Fintek F71805F)
admin	Drive a 2009 car from R799p/m
Antti Harri	Re: how to create a sha256 hash