Re: Linux proc exploit

Alan Cox (alan@lxorguk.ukuu.org.uk)
Thu, 27 Nov 1997 09:03:12 +0000 (GMT)


> What if we had per-process securelevel flag, inherited at fork etc., which
> would make (f)suser return 0 everytime for these processes?

A simple hack to do this is to make suser() check you are not chrooted
but you can equally have no root stuff in the chroot area