Re: chroot useful? (fwd)

Dave Wreski (dave@nic.com)
Sun, 9 Nov 1997 13:33:49 -0500 (EST)


> Mounting /proc in a chrooted environment also has advantages. When
> we create a new version of our linux distribution it's done in a
> chrooted environment. Since some configure-script need access to
> /proc, being able to mount it in a chrooted environment is an
> advantage. Chroot in itself is _not_ a security mechanism.

I was just wondering how this could benefit us in the security
classification.. Anyone familiar with the Orange Book? Possibly this
helps towards C1 or C2 status?

Dave