Messages in this thread | | | Date | Sun, 30 May 1999 12:41:49 -0700 (PDT) | From | Jeremy Fitzhardinge <> | Subject | Re: access to proc filesystem from chrooted process |
| |
On 28-May-99 Alan Cox wrote: >> The claim made was that a hacker who hacks into a chroot trap can >> mount proc and use it to get out of the chroot trap, and I can't see >> how such can be done, hence the question... > > /proc/[pid]/fd/.. is handles to files outside the chroot area.
I fixed it in the middle of 2.1 sometime. /proc will only let you into a [pid] subdir if that process's root is at least as restricted as your own.
J
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |