Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261655AbVEAPle (ORCPT ); Sun, 1 May 2005 11:41:34 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261657AbVEAPle (ORCPT ); Sun, 1 May 2005 11:41:34 -0400 Received: from wproxy.gmail.com ([64.233.184.196]:2398 "EHLO wproxy.gmail.com") by vger.kernel.org with ESMTP id S261655AbVEAPlb convert rfc822-to-8bit (ORCPT ); Sun, 1 May 2005 11:41:31 -0400 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nCBwSycFhc1B/miFtMQuqlALOeZxxAmibFysgxz9tZboxRF7Mpr+Kzkmd+KH7kLS3aB5az/4a0HiLy3WwDucPtABIgaxRg6owvpRZi7bKUpEcFUqE7aIGqgmW9VgGsfrxX90nOXel6BAV7x1vTe4L1v+6tyNmJDR1kHc1yC7D+I= Message-ID: Date: Sun, 1 May 2005 10:41:30 -0500 From: Eric Van Hensbergen Reply-To: Eric Van Hensbergen To: Miklos Szeredi Subject: Re: [PATCH] private mounts Cc: jamie@shareable.org, hch@infradead.org, bulb@ucw.cz, viro@parcelfarce.linux.theplanet.co.uk, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, akpm@osdl.org In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7BIT Content-Disposition: inline References: <20050425071047.GA13975@vagabond> <20050430094218.GA32679@mail.shareable.org> <20050430143609.GA4362@mail.shareable.org> <20050430164258.GA6498@mail.shareable.org> <20050430235453.GA11494@mail.shareable.org> Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 805 Lines: 21 On 5/1/05, Miklos Szeredi wrote: > > As someone pointed out, CAP_SYS_ADMIN processes can already escape the > chroot jail with CLONE_NEWNS. (fd=open("."); clone(CLONE_NEWNS); > [child:] fchdir(fd); chdir("..")) > This really does seem like a bug. Is there are a reason behind this "feature", or should one of us be looking into a patch to correct this? Miklos you earlier suggested: >>>How about fixing fchdir, so it checks whether you gone outside the >>>tree under current->fs->rootmnt? Should be fairly easy to do. -eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/