I think what Karma was suggesting is that a process executing inside the schroot environment can use ptrace(2) to attach to a process outside the schroot environment. Such a process will probably have the ability to run:
schroot -c <foo> -u root <arbitrary root-level command> Of course, on Ubuntu kernels, the ptrace(2) attachment will fail due to: kernel.yama.ptrace_scope = 1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1010787 Title: Process building package can escape from chroot and gain local root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbuild/+bug/1010787/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
