About this list Date view Thread view Subject view Author view Attachment view

From: klavs klavsen (kl_at_vsen.dk)
Date: Sun 10 Feb 2002 - 15:37:25 GMT


Hi guys,

I have a security question, in regards to vserver.

I read this article about chrooting your services
http://www.gnujobs.com/Articles/23/chroot.html
and if you did so, as I understand it - it would be kind of achieving
the same as vserver - from a hackers standpoint - without all the smart
benefits.(no disrespect meant).

In the comments I saw this article about breaking a chroot.
http://www.bpfh.net/simes/computing/chroot-break.html

My question is, if anyone know or have tried wether or not the chroot
functionality of vserver can be broken like this? or does the kernel
changes help ensure, this never happens?

This just to know how well I should sleep at night, with vserver
installed :-)

/Klavs
 

-- 
Regards,
Klavs Klavsen

-------------| This mail has been sent to you by: |------------ Klavs Klavsen - OpenSource Consultant kl_at_vsen.dk - http://www.vsen.dk

Get PGP key from www.keyserver.net - Key ID: 0x586D5BCA Fingerprint = A95E B57B 3CE0 9131 9D15 94DA E1CD 641E 586D 5BCA --------------------[ I believe that... ]----------------------- It is a myth that people resist change. People resist what other people make them do, not what they themselves choose to do... That's why companies that innovate successfully year after year seek their peopl's ideas, let them initiate new projects and encourage more experiments. -- Rosabeth Moss Kanter



About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 06 Nov 2002 - 07:03:39 GMT by hypermail 2.1.3