On Thu, Feb 9, 2017 at 8:47 AM, Walter Dnes wrote:
> On Wed, Feb 08, 2017 at 08:27:41PM -0500, Rich Freeman wrote
>
>> As you can see, there is limited ability for even root to accidentally
>> mess something up. If you bind-mount /dev in a regular chroot
>> (without a hardening technology on top)
On Wed, Feb 08, 2017 at 08:27:41PM -0500, Rich Freeman wrote
> As you can see, there is limited ability for even root to accidentally
> mess something up. If you bind-mount /dev in a regular chroot
> (without a hardening technology on top) and something running as root
> in the chroot tries to wr
On Wed, 8 Feb 2017 20:27:41 -0500, Rich Freeman wrote:
> > It shouldn't matter that they are bind-mounted. The -x switch excludes
> > anything on a different filesystem.
> >
>
> Agree, but I will note that one of the advantages of using a container
> and mounting a new /dev is that you get a gr
On Wed, Feb 8, 2017 at 7:36 PM, Neil Bothwick wrote:
>
> It shouldn't matter that they are bind-mounted. The -x switch excludes
> anything on a different filesystem.
>
Agree, but I will note that one of the advantages of using a container
and mounting a new /dev is that you get a greatly reduced
On Wed, 8 Feb 2017 17:28:44 -0500, Walter Dnes wrote:
> > If you used the -x switch with rsync, the contents of sys, dev and
> > proc won't be copied n the first place, nor will the contents of any
> > other mounted filesystems.
> >
> > That's if you rsynced from a running VM. If you used qemu-nd
On Wed, Feb 08, 2017 at 08:45:03AM +, Neil Bothwick wrote
> If you used the -x switch with rsync, the contents of sys, dev and proc
> won't be copied n the first place, nor will the contents of any other
> mounted filesystems.
>
> That's if you rsynced from a running VM. If you used qemu-ndb
On Tue, 7 Feb 2017 20:33:57 -0500, Walter Dnes wrote:
> Here's how I did it...
>
> * Ensured that CONFIG_IA32_EMULATION was set in the kernel config of the
> 64-bit host linux (Gentoo)
>
> * rsync'd an entire install of CentOS 6.5, lock-stock-and-barrel, from a
> QEMU VM to /home/misc/cent
Here's how I did it...
* Ensured that CONFIG_IA32_EMULATION was set in the kernel config of the
64-bit host linux (Gentoo)
* rsync'd an entire install of CentOS 6.5, lock-stock-and-barrel, from a
QEMU VM to /home/misc/centos65
* rm -rf /home/misc/centos65/dev /home/misc/centos65/sys
/home
8 matches
Mail list logo
