Re: Chroot bug — Linux Kernel

So what? Just do this: chdir into the root after chroot.

I don't think so.  His exploit just got me all the way out of a chroot within a
chroot within a chroot, inclusive of lots of chdirs.


Close all fds that point to directories outside the root ;-)

This  does not help.  Let's try:
chroot somewhere
mkdir foo
fd = open /
chroot foo
fchdir fd
chdir ".."
....
chdir ".."
chroot "."
so you are in root.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Follow-Ups:
- Re: Chroot bug
  - From: "Serge E. Hallyn" <[email protected]>
- Re: Chroot bug
  - From: Jan Engelhardt <[email protected]>

References:
- Re: sys_chroot+sys_fchdir Fix
  - From: "Philipp Marek" <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: David Newall <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: Philipp Marek <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: David Newall <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: Bill Davidsen <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: David Newall <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: "Serge E. Hallyn" <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: David Newall <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: "Serge E. Hallyn" <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: David Newall <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: "Serge E. Hallyn" <[email protected]>
- Re: sys_chroot+sys_fchdir Fix
  - From: David Newall <[email protected]>
- Chroot bug (was: sys_chroot+sys_fchdir Fix)
  - From: David Newall <[email protected]>
- Re: Chroot bug (was: sys_chroot+sys_fchdir Fix)
  - From: Jan Engelhardt <[email protected]>
- Re: Chroot bug
  - From: David Newall <[email protected]>
- Re: Chroot bug
  - From: Jan Engelhardt <[email protected]>

Prev by Date: Re: Linux 2.6.22.8
Next by Date: Re: /proc/kallsyms and symbol size
Previous by thread: Re: Chroot bug
Next by thread: Re: Chroot bug
Index(es):
- Date
- Thread

[Index of Archives] [Kernel Newbies] [Netfilter] [Bugtraq] [Photo] [Stuff] [Gimp] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Video 4 Linux] [Linux for the blind] [Linux Resources]