http://www.linux-vserver.org/api.php?action=feedcontributions&user=Affockaft&feedformat=atomLinux-VServer - User contributions [en]2024-03-29T11:35:45ZUser contributionsMediaWiki 1.20.2http://www.linux-vserver.org/Talk:Secure_chroot_BarrierTalk:Secure chroot Barrier2012-12-21T05:08:51Z<p>Affockaft: /* billige nike sko,nike shox sko tilbud */ new section</p>
<hr />
<div># setattr --barrier /vservers<br />
# showattr /vservers<br />
*NOTE: when setting xattrs on reiserfs, please not that the filesystem has to be mounted explicitly with 'attrs' option, i.e.: mount /dev/reiserfsdev /vservers -oattrs to get the barrier survive after umount/reboot.<br />
<br />
Seems insufficient. You need to set --barrier for every existing and NEW directory except those below /vservers/. as the suggested command protects only against chdir ..<br />
<br />
Why? The fchdir.<br />
<br />
Am I right?<br />
<br />
once you gain root inside the scure chroot:<br />
<br />
may you gain access to the device node?<br />
<br />
i/o ports not restricted?<br />
<br />
<br />
# Accoring to http://oldwiki.linux-vserver.org/Step-by-Step+Guide+2.6: "On Linux 2.6 this isn't really necessary, since another mechanism is used to lock in the guests anyway" - maybe someone could elaborate on this and put it in the article, please<br />
<br />
== billige nike sko,nike shox sko tilbud ==<br />
<br />
http://nikeskoene.com/ Nike Shox Sko Tilbud,Sko Nike Shox,Nike Shox NZ Sko,Shox Nz Sko,Shox R4 Sko,Nike Shox NZ,Nike Shox R4 Sko <br />
http://nikeskoene.com/ Billige Air Max Sko,Billige Shox Sko,Billige Nike Sko,Air Max Sko Nike</div>Affockaft