Re: if root compromised in a VS...

[Nick Burrett]

[EMAIL PROTECTED] writes:

> 
> am [09 May 2001 12:08:50 +0100] schrieb Nick Burrett <[EMAIL PROTECTED]> :
> 
> > Ben Kennish <[EMAIL PROTECTED]> writes:
> > 
> > > Ouch, Nick - you're right.
> > > 
> > > http://www.bpfh.net/simes/computing/chroot-break.html
> > > 
> > > ..makes for painful reading.  I assume that the only way to 
> > > prevent this is to stop root access to any VSes?
> > 
> > Almost impossible.  But there are Linux kernel hacks around that the chroot
> > problem. 
> 
> Do you have any link?

No. Try looking for HAP-Linux on freshmeat.
 
> Do you have an suggestion which suid program on the skel could be
> vulnerable?

No. I'm not suggesting any programs are vulnerable.  But problems occur
over time, so you might be hit by something in the future.

Nick.