Rooting FreeBSD , Privilege Escalation using Jails (P??????tur)

Chris Rees utisoft at gmail.com
Wed May 11 10:06:43 UTC 2011


On 11 May 2011 06:28, "Janne Snabb" <snabb at epipe.com> wrote:
>
> On Tue, 10 May 2011, Bakul Shah wrote:
>
> > Dumb question: the jail command can refuse to run unless the
> > parent of a jail root is 0700. Would that work? No kernel hack
> > required.
>
> I do not think that this should be enforced in kernel, in the jail(8)
> command nor anywhere else. UNIX rm(1) is not opening a pop-up window
> asking "are you sure?" if you do "rm -rf /".

I suggest you test this assertion....

Chris


More information about the freebsd-security mailing list