Package: user-mode-linux Version: 6.0um1+b1 Tags: security
The man page says that hostfs kernel param is "used to confine all hostfs mounts to within the specified directory tree on the host". But it's trivial to escape this confinements with ../ sequences:
# mount none -t hostfs -o ../../../../../../../../home/bob/secrets /mnt -- System Information: Architecture: i386 -- Jakub Wilk
