Re: /etc/passwd, etc ownership

>
> I'm thinking that a solution of simply adding a sysctl variable that
> enables or disables chrooting from within a chrooted directory would give
> the most bang for the buck. Should simply involve checking if fd_rdir is
> NULL and, if not, refusing to chroot; 1 line change, plus the overhead to
> make it configurable. You do have to then prevent people from changing
> that sysctl variable in a chrooted environment...
>
> This change alone does not make it secure for someone to have root inside
> a chrooted environment, but it is a first ste at making it a little bit
> harder to break out.
>

This does make sense to me.

-Guido Received on Sat Mar 1 05:40:35 1997