Re: [PATCH] replace SYSV shared memory with shm filesystem

From: Rik van Riel (riel@nl.linux.org)
Date: Mon Jan 10 2000 - 07:52:01 EST


On 10 Jan 2000, Christoph Rohland wrote:

> You can mount the fs only once. This will probably break shm in
> chrooted environments.

I think it would be best to code it in such a way that you
can mount multiple instances of shmfs, in such a way that
the differently chrooted programs cannot see each other's
shared memory. That should make it a bit more difficult to
get out of a chroot() jail...

(security buffs, please tell me if I'm full of it)

cheers,

Rik

--
The Internet is not a network of computers. It is a network
of people. That is its real strength.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Jan 15 2000 - 21:00:15 EST