Re: Relax the prohibition of usage fchdir(2) to quit a chroot
Warner Losh <[email protected]>
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <[email protected]> |
On Sep 21, 2014, at 9:14 AM, Manuel Bouyer <[email protected]> wrote: > On Sun, Sep 21, 2014 at 04:28:37AM -0700, Paul Goyette wrote: >> IMHO, we should not implement this "feature". We should not introduce ways >> to avoid deliberate, well-thought-out security mechanisms. >> >> The use-case itself is broken, in my opinion. > > Strongly seconded. fork() adequately solves this problem for the use case that was put forward. There’s no need to go breaking things. Warner
signature.asc
(application/pgp-signature, 842 B)
-----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJUIIuQAAoJEGwc0Sh9sBEAQdcP+wSFok43/q6Wdo8veF7NoDLw e4wQGv8pvp5CTfDOcb2Ocbtj0sB3G02BqzUCV+oJE4JImqm/zpZPzfqt/26BNhed zt9xwIO11EGR7PGRIh1drUGQVyzRMO1jx99Ip+IXh18+Qzsz6I9lRFLVQ5iaHaNI QtuKIEJaEIV8pDHgYP48GQleGR5eSQTFOpZC552C7uRys00N462+5S2dLuoSYlVJ WamQ7w95UHL/uGorUyLQT9NSxJDQKmUbLk/9d2QG8HlR4l3WifoPJ9GI99m/kX9n RixDE0GTeshTHFNuIsiWQS/8OKDduYjONlbgOQWYdpN3slJID31YD5KEzu560g3C NqsKOQsmpmEDVSyrjFa7Ntt5sf+23ziC7u77F3SIGERhkIwutuaTNQoQGpOP/UK3 C0idloZsgtolHWQMyUuApLBWvtoeCEI+IXqnlv3jQPfE1lRbZY1viH1v4QNnNgEP P5sO9M7oBSQSaEqMzko8FP9pHeNGk9cGeO2PiS66R7L31oj8pcBj/Pon3NBNdHj0 MZL+x55WZX/WkZW3V64QjEO8DQIOknuzKvSn9gNQC2JMhr51PJjeWd6nNGJODiD+ JOrKc5b+gyim0OZDbdGsI+TWZkMxDWuHu8aGPbaTW8+AKa1uB50//JMlOz3Bh9GE iGT3m3sxBFDOJ0Il33g3 =sOq5 -----END PGP SIGNATURE-----