About this list Date view Thread view Subject view Author view Attachment view

From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Thu 08 Jan 2004 - 20:25:28 GMT


Dear Vserver Community!

we discovered that there is a security issue
in all vserver versions, which will be solved
soon, but for now it would be best to mount
the procfs read only on your vserver host.

this can be done with:

 mount -o remount,ro /proc

if access to the procfs is required on the
host again (before a reboot, or for some other
configurations) you can remount the procfs
read-write again ...

 mount -o remount,rw /proc

as you can imagine, it has to do with write
access to specific proc entries from a vserver
context ...

best,
Herbert

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 08 Jan 2004 - 20:26:39 GMT by hypermail 2.1.3