[Fedora-packaging] Re: Absolute symlinks

Axel Thimm Axel.Thimm at ATrpms.net
Tue Aug 22 17:14:07 UTC 2006


On Tue, Aug 22, 2006 at 09:56:28AM -0700, Toshio Kuratomi wrote:
> > If accessed from inside the chroot, absolute
> > paths are even securer when being root.
> > 
> More secure?

Yes, you can't escape a chroot using absolute paths, almost every
chroot exploit uses ".." once too many.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-packaging/attachments/20060822/cb37e33f/attachment.sig>


More information about the Fedora-packaging mailing list