Re: Chroot bug

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: David Newall <david@...>
Cc: Olivier Galibert <galibert@...>, Kyle Moffett <mrmacman_g4@...>, Adrian Bunk <bunk@...>, Alan Cox <alan@...>, Serge E. Hallyn <serge@...>, Bill Davidsen <davidsen@...>, Philipp Marek <philipp@...>, <7eggert@...>, majkls <majkls@...>, <bunk@...>, <linux-kernel@...>
Date: Wednesday, September 26, 2007 - 9:18 am

On Wed, 26 Sep 2007, David Newall wrote:


I don't know that the so-called requirements are, but if you
have a distribution tree mounted on /mnt and you perform the
following operations:

cd /mnt
chroot . bin/bash

That shell, will not leave the new root until it exits or
executes `chroot`. I've tried the "tricks" about mounting
/proc and changing to 'cwd' of init, etc. However, your
new root needs to NOT have the chroot utility available
and/or the system call needs to be removed or trapped
in the runtime library of the new root, because, quite
obviously, a root process can do anything it wants.
That's how Unix was designed. So, if you don't want
somebody to get out of your 'jail' don't provide
the keys. It's clearly not a kernel issue.


Cheers,
Dick Johnson
Penguin : Linux version 2.6.22.1 on an i686 machine (5588.29 BogoMips).
My book : http://www.AbominableFirebug.com/
_


****************************************************************
The information transmitted in this message is confidential and may be privileged.  Any review, retransmission, dissemination, or other use of this information by persons or entities other than the intended recipient is prohibited.  If you are not the intended recipient, please notify Analogic Corporation immediately - by replying to this message or by sending an email to DeliveryErrors@analogic.com - and destroy all copies of this information, including any attachments, without reading or disclosing them.

Thank you.
-
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: sys_chroot+sys_fchdir Fix, Bodo Eggert, (Thu Sep 20, 7:13 am)
Re: sys_chroot+sys_fchdir Fix, Philipp Marek, (Thu Sep 20, 7:59 am)
Re: sys_chroot+sys_fchdir Fix, David Newall, (Thu Sep 20, 12:06 pm)
Re: sys_chroot+sys_fchdir Fix, Philipp Marek, (Thu Sep 20, 12:17 pm)
Re: sys_chroot+sys_fchdir Fix, David Newall, (Thu Sep 20, 2:02 pm)
Re: sys_chroot+sys_fchdir Fix, Bill Davidsen, (Thu Sep 20, 4:53 pm)
Re: sys_chroot+sys_fchdir Fix, David Newall, (Fri Sep 21, 4:29 am)
Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Mon Sep 24, 5:32 pm)
Re: sys_chroot+sys_fchdir Fix, David Newall, (Mon Sep 24, 6:04 pm)
Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Mon Sep 24, 7:02 pm)
Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Mon Sep 24, 7:00 pm)
Re: sys_chroot+sys_fchdir Fix, David Newall, (Tue Sep 25, 3:45 am)
Re: sys_chroot+sys_fchdir Fix, Serge E. Hallyn, (Tue Sep 25, 7:49 am)
Re: sys_chroot+sys_fchdir Fix, David Newall, (Tue Sep 25, 9:58 am)
Chroot bug (was: sys_chroot+sys_fchdir Fix), David Newall, (Tue Sep 25, 11:10 am)
Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Bodo Eggert, (Wed Sep 26, 3:23 pm)
Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Adrian Bunk, (Tue Sep 25, 11:32 am)
Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 11:43 am)
Re: Chroot bug, Adrian Bunk, (Tue Sep 25, 12:02 pm)
Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Alan Cox, (Tue Sep 25, 11:30 am)
Re: Chroot bug, David Newall, (Tue Sep 25, 11:35 am)
Re: Chroot bug, Arjan van de Ven, (Tue Sep 25, 12:33 pm)
Re: Chroot bug, Alan Cox, (Tue Sep 25, 11:48 am)
Re: Chroot bug, David Newall, (Tue Sep 25, 7:50 pm)
Re: Chroot bug, Adrian Bunk, (Tue Sep 25, 8:55 pm)
Re: Chroot bug, Kyle Moffett, (Wed Sep 26, 1:21 am)
Re: Chroot bug, David Newall, (Wed Sep 26, 6:27 am)
Re: Chroot bug, Kyle Moffett, (Wed Sep 26, 8:54 am)
Re: Chroot bug, Miloslav Semler, (Wed Sep 26, 9:11 am)
Re: Chroot bug, Kyle Moffett, (Wed Sep 26, 10:02 am)
Re: Chroot bug, Miloslav Semler, (Wed Sep 26, 11:01 am)
Re: Chroot bug, Jiri Kosina, (Thu Sep 27, 9:49 am)
Re: Chroot bug, Al Viro, (Wed Sep 26, 9:42 am)
Re: Chroot bug, Miloslav Semler, (Wed Sep 26, 10:51 am)
Re: Chroot bug, Olivier Galibert, (Wed Sep 26, 6:45 am)
Re: Chroot bug, David Newall, (Wed Sep 26, 7:13 am)
Re: Chroot bug, Olivier Galibert, (Wed Sep 26, 11:02 am)
Re: Chroot bug, linux-os (Dick Johnson), (Wed Sep 26, 9:18 am)
Re: Chroot bug, Willy Tarreau, (Wed Sep 26, 1:25 am)
Re: Chroot bug, Alan Cox, (Tue Sep 25, 8:18 pm)
Re: Chroot bug, David Newall, (Wed Sep 26, 6:24 am)
Re: Chroot bug, Alan Cox, (Wed Sep 26, 6:47 am)
Re: Chroot bug, David Newall, (Wed Sep 26, 7:06 am)
Re: Chroot bug, Bongani Hlope, (Wed Sep 26, 9:13 am)
Re: Chroot bug, Alan Cox, (Wed Sep 26, 7:20 am)
Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 11:47 am)
Re: Chroot bug (was: sys_chroot+sys_fchdir Fix), Jan Engelhardt, (Tue Sep 25, 11:20 am)
Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 11:39 am)
Re: Chroot bug, David Newall, (Tue Sep 25, 11:41 am)
Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 11:48 am)
Re: Chroot bug, David Newall, (Tue Sep 25, 4:51 pm)
Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 12:19 pm)
Re: Chroot bug, Serge E. Hallyn, (Tue Sep 25, 12:53 pm)
Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 12:52 pm)
Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 1:00 pm)
Re: Chroot bug, Jan Engelhardt, (Tue Sep 25, 1:05 pm)
Re: Chroot bug, Al Viro, (Tue Sep 25, 1:09 pm)
Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 1:19 pm)
Re: Chroot bug, Miloslav Semler, (Tue Sep 25, 1:09 pm)
Re: sys_chroot+sys_fchdir Fix, majkls, (Thu Sep 20, 8:52 am)