Re: chrooted environment

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



* Supriya Phadke (ssp1741@cs.tamu.edu) wrote:
> Hi,
> Suppose that a process inside a chrooted environment is trying to access a
> file. For security reasons I want to find out if the file being accessed 
> is inside the chrooted directory or outside it. (There are ways by which a
> user can get out of the chroot and I basically want to prevent that).

This thread just popped up on lkml.  Rather than repeat it, I'll just
point you to it.

http://marc.theaimsgroup.com/?t=102587722400002&r=1&w=2

> Is there a way to do the same ?

Don't use chroot ;-)  Seriously, chroot has many holes.  If you really
care about security use something more sophisticated.  You'll find
security modules on http://lsm.immunix.org that may suit your needs.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive:       http://mail.nl.linux.org/kernelnewbies/
FAQ:           http://kernelnewbies.org/faq/


[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux