From: Nuno Silva (nuno.silva_at_vgertech.com)
Date: Fri 09 May 2003 - 05:04:44 BST
Jacques Gelinas wrote:
> On Fri, 9 May 2003 06:50:04 -0500, Mitchell Smith wrote
[..snip..]
>
>
>>Am just thinking in terms of UML running it's own kernel in userspace, vs a
>>system running in a chrooted environment. Which would be easier to break
>>out of?
>
>
> Probably the vserver
>
Actually, I find UML easier to break. If you have a UML kernel compiled
with module support it's piece of cake :) Anyway, that's a feature, not
a bug (really, not kidding! :) ).
And I never managed to break out of a vserver (with a limited /dev and
all capabilities disabled - as the default configuration recommends -,
of course).
Regards,
Nuno Silva