From: Blaisorblade <blaisorblade@yahoo.it>
To: Antoine Martin <antoine@nagafix.co.uk>
Cc: Jeff Dike <jdike@addtoit.com>, Sylvain Beucler <beuc@beuc.net>,
user-mode-linux-devel@lists.sourceforge.net,
Christopher Aker <caker@theshore.net>
Subject: Re: [uml-devel] [uml-user] [PATCH] uml hostfs: fix interaction between hostfs=path1 and -o path2 at mount time
Date: Mon, 5 Mar 2007 19:29:08 +0100 [thread overview]
Message-ID: <200703051929.08916.blaisorblade@yahoo.it> (raw)
In-Reply-To: <45EB4DE7.50608@nagafix.co.uk>
On Sunday 04 March 2007 23:53, Antoine Martin wrote:
> Blaisorblade wrote:
> > On Sunday 04 March 2007 17:50, Sylvain Beucler wrote:
> >> On Sat, Mar 03, 2007 at 07:32:46PM +0100, Blaisorblade wrote:
> >> Hi,
> >>
> >> I tested and it works.
> >>
> >> Thanks,
> >
> > You'll probably also see that -o .. allows bypassing the 'hostfs jail',
> > and I've just implemented a fix to that. The question is whether this
> > should be merged.
> >
> > Indeed, the root user inside UML can bypass that anyway, if he modifies
> > the hostfs module, compiles and loads it.
>
> If security is at stake then the host admin should use non-modular
> kernels to prevent such tampering.
I know /dev/kmem allows bypassing that, but I don't know of any kmem-insmod
out there (and that would make the issue quite practical).
--
Inform me of my mistakes, so I can add them to my list!
Paolo Giarrusso, aka Blaisorblade
http://www.user-mode-linux.org/~blaisorblade
Chiacchiera con i tuoi amici in tempo reale!
http://it.yahoo.com/mail_it/foot/*http://it.messenger.yahoo.com
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel
prev parent reply other threads:[~2007-03-05 18:29 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20070301230442.GA469@localhost.localdomain>
[not found] ` <200703031932.46323.blaisorblade@yahoo.it>
[not found] ` <20070304165030.GB6516@localhost.localdomain>
2007-03-04 18:50 ` [uml-devel] [uml-user] [PATCH] uml hostfs: fix interaction between hostfs=path1 and -o path2 at mount time (was: Re: hostfs kernel parameter fail?) Blaisorblade
2007-03-04 22:53 ` [uml-devel] [uml-user] [PATCH] uml hostfs: fix interaction between hostfs=path1 and -o path2 at mount time Antoine Martin
2007-03-05 18:29 ` Blaisorblade [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200703051929.08916.blaisorblade@yahoo.it \
--to=blaisorblade@yahoo.it \
--cc=antoine@nagafix.co.uk \
--cc=beuc@beuc.net \
--cc=caker@theshore.net \
--cc=jdike@addtoit.com \
--cc=user-mode-linux-devel@lists.sourceforge.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox