Difference between revisions of "Talk:Secure chroot Barrier"

From Linux-VServer

Jump to: navigation, search
(→‎Ralph Lauren Hoodies biliga online: new section)
m (Reverted edits by Thespisee (talk) to last revision by Powerfox)
Line 17: Line 17:
  
 
# Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please
 
# Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please
−
 
−
== Ralph Lauren Hoodies biliga online ==
 
−
 
−
http://www.ralphlaurensalu.com/  We usually requires this participation to a fresh degree, being a prosperous and fascinating interactive vacation spot. While you are transported into your environment of cheap ralph lauren polos internet, you can actually shop for superb services for all by yourself along with your family home, learn about about adventure, model and culture in cheap ralph lauren men long polos and RL Tv, get one-of-a-kind vintage pieces and beautiful gifts and very much, very much even more. Back when all this began, We felt guaranteed that there have been no boundaries for Polo. We're a lot more sure of that at this time.
 
−
 
−
http://www.ralphlaurensalu.com/  Billiga Ralph Lauren Coats,Ralph Lauren US Open Tennis,Ralph Lauren U.S. Polo,Ralph Lauren Tees,Ralph Lauren Sweaters,Ralph Lauren Stripe Polo,Ralph lauren Sport Shorts,Ralph Lauren Shirts,Ralph Lauren Polo Golf,Ralph Lauren Olympics,
 

Revision as of 15:18, 26 December 2012

  1. setattr --barrier /vservers
  2. showattr /vservers
  • NOTE: when setting xattrs on reiserfs, please not that the filesystem has to be mounted explicitly with 'attrs' option, i.e.: mount /dev/reiserfsdev /vservers -oattrs to get the barrier survive after umount/reboot.

Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..

Why? The fchdir.

Am I right?

once you gain root inside the scure chroot:

may you gain access to the device node?

i/o ports not restricted?


  1. Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please
Retrieved from "http://wiki.linux-vserver.org/index.php?title=Talk:Secure_chroot_Barrier&oldid=18599"
Personal tools