Re: Hard links to a directory in a chroot environment

[joost@rulcmc.leidenuniv.nl (joost witteveen)]

[..]
> Hard linked directories are bad, it would taker longer than that to explain.

That's apity, cause I've been wanting to know why they are
bad for a long time. Do you have any reference where I can
search for an answer on that one?

> For maximum security in chrooted environments:
>   o don't mount /proc in the chrooted tree
[..]
>   o don't have devices in the chrooted tree

Why are these? I can understand that they will cause havoc when
a user in a chrooted becomes root, but if they do, they can create
the devices/mounts files anyway. So, why are they suddenly a problem
in chrooted environments?

(I'm not questioning your wisdom, I'm just curious).

Thanks,


-- 
joost witteveen, joostje@debian.org
#!/usr/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
#what's this? see http://www.dcs.ex.ac.uk/~aba/rsa/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .