Re: Linux proc exploit

Rogier Wolff (R.E.Wolff@BitWizard.nl)
Wed, 26 Nov 1997 19:25:38 +0100 (MET)


D.P.Simpson@ecs.soton.ac.uk wrote:
>
> Linux has a vulnerability in the proc filing system: it can be used
> by root to escape from chroot() areas.

Any "root" user inside a chrooted environment is also root on the
whole machine. The intent of a chrooted environment is that those
confined to that "jail" don't have the holes available to become root.

Roger.

-- 
** R.E.Wolff@BitWizard.nl ** +31-15-2137555 ** http://www.BitWizard.nl/ **
Florida -- A 39 year old construction worker woke up this morning when a
109-car freight train drove over him. According to the police the man was 
drunk. The man himself claims he slipped while walking the dog. 080897