http://linux-vserver.at/api.php?action=feedcontributions&feedformat=atom&user=Staiptump 2026-04-10T04:52:59Z User contributions MediaWiki 1.20.2 http://linux-vserver.at/Talk:Secure_chroot_Barrier 2012-12-19T04:39:47Z

<p>Staiptump: /* Billige Supra Justin Bieber Sko */ new section</p> <hr /> <div># setattr --barrier /vservers<br /> # showattr /vservers<br /> *NOTE: when setting xattrs on reiserfs, please not that the filesystem has to be mounted explicitly with 'attrs' option, i.e.: mount /dev/reiserfsdev /vservers -oattrs to get the barrier survive after umount/reboot.<br /> <br /> Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..<br /> <br /> Why? The fchdir.<br /> <br /> Am I right?<br /> <br /> once you gain root inside the scure chroot:<br /> <br /> may you gain access to the device node?<br /> <br /> i/o ports not restricted?<br /> <br /> <br /> # Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: &quot;On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway&quot; - maybe someone could elaborate on this and put it in the article, please<br /> <br /> == Billige Supra Justin Bieber Sko ==<br /> <br /> http://nikeskoene.com/ Supra Skytop III Sko,Supra Skytop Sko,Supra TK Society <br /> http://nikeskoene.com/ Supra TK Society Sko Barn,Supra Barnsko,Supra Damesko</div>

Staiptump