From: klavs klavsen (kl_at_vsen.dk)
Date: Sun 10 Feb 2002 - 15:37:25 GMT
Hi guys,
I have a security question, in regards to vserver.
I read this article about chrooting your services
http://www.gnujobs.com/Articles/23/chroot.html
and if you did so, as I understand it - it would be kind of achieving
the same as vserver - from a hackers standpoint - without all the smart
benefits.(no disrespect meant).
In the comments I saw this article about breaking a chroot.
http://www.bpfh.net/simes/computing/chroot-break.html
My question is, if anyone know or have tried wether or not the chroot
functionality of vserver can be broken like this? or does the kernel
changes help ensure, this never happens?
This just to know how well I should sleep at night, with vserver
installed :-)
/Klavs
-- Regards, Klavs Klavsen-------------| This mail has been sent to you by: |------------ Klavs Klavsen - OpenSource Consultant kl_at_vsen.dk - http://www.vsen.dk
Get PGP key from www.keyserver.net - Key ID: 0x586D5BCA Fingerprint = A95E B57B 3CE0 9131 9D15 94DA E1CD 641E 586D 5BCA --------------------[ I believe that... ]----------------------- It is a myth that people resist change. People resist what other people make them do, not what they themselves choose to do... That's why companies that innovate successfully year after year seek their peopl's ideas, let them initiate new projects and encourage more experiments. -- Rosabeth Moss Kanter