On Sat, Oct 20, 2001 at 10:20:01AM +0200, Peter Svensson wrote:

> No, symlinks won't work (see an earlier post). However, hardlinks will and
> lets you save space. For a single chroot jail this is not a big deal, but
> if you have lots of them the savings can be significant.

Ah, nice idea.  I never considered that one.

The disadvantage to this approach is that if one of your users finds a
local exploit and becomes root inside her chroot() jail, she could then
overwrite the programs linked from her $HOME/bin -- which are the same
programs that ALL your users are using.  So suddenly every chroot()
user would be running the trojan programs.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to