Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1760008AbXIZNmq (ORCPT ); Wed, 26 Sep 2007 09:42:46 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1755110AbXIZNmj (ORCPT ); Wed, 26 Sep 2007 09:42:39 -0400 Received: from zeniv.linux.org.uk ([195.92.253.2]:47843 "EHLO ZenIV.linux.org.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754743AbXIZNmi (ORCPT ); Wed, 26 Sep 2007 09:42:38 -0400 Date: Wed, 26 Sep 2007 14:42:23 +0100 From: Al Viro To: Miloslav Semler Cc: Kyle Moffett , David Newall , Adrian Bunk , Alan Cox , "Serge E. Hallyn" , Bill Davidsen , Philipp Marek , 7eggert@gmx.de, bunk@fs.tum.de, linux-kernel@vger.kernel.org Subject: Re: Chroot bug Message-ID: <20070926134223.GO8181@ftp.linux.org.uk> References: <46F924E3.50205@davidnewall.com> <20070925163040.12a3c2f8@the-village.bc.nu> <46F92AAB.1060903@davidnewall.com> <20070925164806.4cadc6a5@the-village.bc.nu> <46F99EDE.70905@davidnewall.com> <20070926005551.GS6800@stusta.de> <46FA341A.80706@davidnewall.com> <6BA6E9EE-B67B-4334-AC83-9B8E30527832@mac.com> <46FA5A85.20407@prepere.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <46FA5A85.20407@prepere.com> User-Agent: Mutt/1.4.1i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 937 Lines: 20 On Wed, Sep 26, 2007 at 03:11:33PM +0200, Miloslav Semler wrote: > >As for the nested-chroot() bit, the root user inside of a chroot is > >always allowed to chroot(). This is necessary for test-suites for > >various distro installers, chroot once to enter the installer playpen, > >installer chroots again to configure the test-installed-system. Once > >you allow a second chroot, you're back at the "can't reliably and > >efficiently track directory sub-tree members" problem. > > > >So if you think it can and should be fixed, then PROVIDE THE CODE. > Miloslav Semler man openat This is really pointless, anyway - any code that expects chroot to be root-proof is terminally broken. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/