unprivileged users are able to kill certain jailed processes

Björn König bkoenig at cs.tu-berlin.de
Sun Feb 5 06:13:51 PST 2006


Björn König schrieb:

> These are some steps to reproduce:
> 
>   root at host # jail -Uuserxy / localhost 127.0.0.1 /bin/sleep 12345&
> 
>   root at host # ps a | grep sleep
> 
>    2255  p2  IJ     0:00,01 /bin/sleep 12345
> 
>   login as 'userxy'
> 
>   userxy at host $ ps a | grep sleep
>    2255  p2  IJ     0:00,01 /bin/sleep 12345

    userxy at host $ kill 2255

>   userxy at host $ ps a | grep sleep
>    [nothing]


More information about the freebsd-current mailing list