Re: [vserver] Using NFS mounts in a vserver

[Enrico Scholz]

[EMAIL PROTECTED] ("Matthieu Racine") writes:

> I'm using NFS mounts with succes in vservers from about 4 months.
> ...
> 3 - when starting the vserver, doing :
> chbind --ip <my_vserverip> --bcast <my_vserver_broadcast> chroot
> ${VSERVERS_ROOT}/${VSERVER_NAME} mount -t nfs
> <myNFSserverIP>:/partage/nfs/pro /mnt/pro

This 'chroot' makes you vulnerably against attacks from inside of the
chroot (attacker can replace 'mount' (which runs in host-ctx) and can
break out of the chroot).



Enrico