kern/55568: DUMP has access to block devices in a JAIL
kris at obsecurity.org
Wed Oct 8 21:00:36 PDT 2003
The following reply was made to PR kern/55568; it has been noted by GNATS.
From: Kris Kennaway <kris at obsecurity.org>
To: mjoyner <mjoyner at rv1.dynip.com>
Cc: Kris Kennaway <kris at obsecurity.org>,
FreeBSD-gnats-submit at FreeBSD.org
Subject: Re: kern/55568: DUMP has access to block devices in a JAIL
Date: Wed, 8 Oct 2003 20:52:38 -0700
Content-Type: text/plain; charset=us-ascii
On Wed, Oct 08, 2003 at 11:33:50PM -0400, mjoyner wrote:
> Where would one find documentation to prevent the jailed user from being=
> able to dump the raw partition(s)?
jails containing untrusted root users should only contain a minimum
set of device nodes (the exact list would depend on what you want to
do with the jail). This is documented in the manpage.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
-----END PGP SIGNATURE-----
More information about the freebsd-bugs