kern/83297: [bpf] Possible issue with FreeBSD 5.4 jailing and BPF

Matteo Riondato matteo at FreeBSD.org
Sun May 28 01:23:32 PDT 2006


Synopsis: [bpf] Possible issue with FreeBSD 5.4 jailing and BPF

State-Changed-From-To: open->closed
State-Changed-By: matteo
State-Changed-When: Sun May 28 08:11:44 UTC 2006
State-Changed-Why: 
There are just too many ways for "breaking out" of a jail (in a weak sense) to check them all.
Most of them derive from devfs misconfiguration. By instance you can easily panic the host system if
/dev/mdctl is available inside the jail. The man page clearly states that devfs configuration
is important. There's also a "default" devfs ruleset available for jails (check 
/etc/defaults/devfs.rules). Thank you for the report anyway

http://www.freebsd.org/cgi/query-pr.cgi?pr=83297


More information about the freebsd-bugs mailing list