From: Enrico Scholz (enrico.scholz_at_informatik.tu-chemnitz.de)
Date: Wed 17 Sep 2003 - 11:52:46 BST
m.racine_at_free.fr ("Matthieu Racine") writes:
> I'm using NFS mounts with succes in vservers from about 4 months.
> ...
> 3 - when starting the vserver, doing :
> chbind --ip <my_vserverip> --bcast <my_vserver_broadcast> chroot
> ${VSERVERS_ROOT}/${VSERVER_NAME} mount -t nfs
> <myNFSserverIP>:/partage/nfs/pro /mnt/pro
This 'chroot' makes you vulnerably against attacks from inside of the
chroot (attacker can replace 'mount' (which runs in host-ctx) and can
break out of the chroot).
Enrico