On Sunday 04 March 2007 23:53, Antoine Martin wrote: > Blaisorblade wrote: > > On Sunday 04 March 2007 17:50, Sylvain Beucler wrote: > >> On Sat, Mar 03, 2007 at 07:32:46PM +0100, Blaisorblade wrote: > >> Hi, > >> > >> I tested and it works. > >> > >> Thanks, > > > > You'll probably also see that -o .. allows bypassing the 'hostfs jail', > > and I've just implemented a fix to that. The question is whether this > > should be merged. > > > > Indeed, the root user inside UML can bypass that anyway, if he modifies > > the hostfs module, compiles and loads it. > > If security is at stake then the host admin should use non-modular > kernels to prevent such tampering.
I know /dev/kmem allows bypassing that, but I don't know of any kmem-insmod out there (and that would make the issue quite practical). -- Inform me of my mistakes, so I can add them to my list! Paolo Giarrusso, aka Blaisorblade http://www.user-mode-linux.org/~blaisorblade Chiacchiera con i tuoi amici in tempo reale! http://it.yahoo.com/mail_it/foot/*http://it.messenger.yahoo.com ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ User-mode-linux-devel mailing list User-mode-linux-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel
