> without me being worried about CGI security. Mounting devpts,
> devfs, proc and ipcfs into each customers chrooted environment
> would be a PITA and using an automatic access method to such
> filesystems via magic filenames would greatly help in this
> configuration.
On the contrary, it would allow them to easily leak each others private
data from the ipc space and expose things like /dev/mem to a potential
hack where it was not exposed before.
It only looks a good idea until you think about it.
Alan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Tue Mar 07 2000 - 21:00:09 EST