kern/83297: [bpf] Possible issue with FreeBSD 5.4 jailing and
BPF
Matteo Riondato
matteo at FreeBSD.org
Sun May 28 01:23:32 PDT 2006
Synopsis: [bpf] Possible issue with FreeBSD 5.4 jailing and BPF
State-Changed-From-To: open->closed
State-Changed-By: matteo
State-Changed-When: Sun May 28 08:11:44 UTC 2006
State-Changed-Why:
There are just too many ways for "breaking out" of a jail (in a weak sense) to check them all.
Most of them derive from devfs misconfiguration. By instance you can easily panic the host system if
/dev/mdctl is available inside the jail. The man page clearly states that devfs configuration
is important. There's also a "default" devfs ruleset available for jails (check
/etc/defaults/devfs.rules). Thank you for the report anyway
http://www.freebsd.org/cgi/query-pr.cgi?pr=83297
More information about the freebsd-bugs
mailing list