Rooting FreeBSD , Privilege Escalation using Jails (P??????tur)
Jason Hellenthal
jhell at DataIX.net
Mon May 9 14:49:56 UTC 2011
Dag-Erling,
On Mon, May 09, 2011 at 02:34:14PM +0200, Dag-Erling Smørgrav wrote:
> Chris Rees <utisoft at gmail.com> writes:
> > This is the point I'm making, I can't recommend in the docs that one
> > chmods $D/.. because we (the docs writers) don't know what the user
> > (the reader) is going to set $D to.
>
> Ah, OK. But you could provide an example where $D is /var/jail, or
> something along those lines.
>
Do you know if there is a way that chmod on / from within the jail could
be prevented easily without breaking something ? Maybe not failing but
falling though and return 0 for any operation with the sole argument of /.
--
Regards, (jhell)
Jason Hellenthal
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 522 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20110509/257df4c9/attachment.pgp
More information about the freebsd-security
mailing list