Re: [vserver] Are bind mounts to outside the /vserver base a security risk?

Hi Ed,

Quoting Ed W <lists@wildgooses.com>:

> If I have my chroot barrier set on /vserver and then bind mount (for
> some reason) something from /var/xxx into a vserver, does this then
> offer an (accidental) way to break out of the chroot using some kind of
> ".." attack on the bind mount?

I don't think mounting another device poses a big _additional_ security risk.

But, if you are concerned about breaking out of virtual hosts, than
you probably have other worries, as virtual servers are not meant for
security purposes.

Best regards,

Johan.
Received on Mon Nov 19 16:42:39 2007