Re: [uml-devel] [PATCH 04/11] uml - hostfs: avoid possible escapes from hostfs=.

2007-03-05 Thread Jeff Dike
On Mon, Mar 05, 2007 at 11:59:13PM +0100, Blaisorblade wrote: > I gave a look, and it's nice. Except that maybe "escapes_jail" would be a > clearer name (there's confusion about the subject of "escaping"). Feel free to change the name. > Also, what about concurrent UML threads caring about curre

Re: [uml-devel] [PATCH 04/11] uml - hostfs: avoid possible escapes from hostfs=.

2007-03-05 Thread Blaisorblade
On Monday 05 March 2007 23:03, Jeff Dike wrote: > On Mon, Mar 05, 2007 at 09:49:02PM +0100, Paolo 'Blaisorblade' Giarrusso wrote: > > From: Paolo 'Blaisorblade' Giarrusso <[EMAIL PROTECTED]> > > > > Avoid accepting things like -o .., -o dir/../../dir2, -o dir/../.. . > > This may be considered use

Re: [PATCH 04/11] uml - hostfs: avoid possible escapes from hostfs=.

2007-03-05 Thread Jeff Dike
On Mon, Mar 05, 2007 at 09:49:02PM +0100, Paolo 'Blaisorblade' Giarrusso wrote: > From: Paolo 'Blaisorblade' Giarrusso <[EMAIL PROTECTED]> > > Avoid accepting things like -o .., -o dir/../../dir2, -o dir/../.. . > This may be considered useless, but YMMV. I consider that this has a limited > secur

[PATCH 04/11] uml - hostfs: avoid possible escapes from hostfs=.

2007-03-05 Thread Paolo 'Blaisorblade' Giarrusso
From: Paolo 'Blaisorblade' Giarrusso <[EMAIL PROTECTED]> Avoid accepting things like -o .., -o dir/../../dir2, -o dir/../.. . This may be considered useless, but YMMV. I consider that this has a limited security value, exactly like disabling module support (in many case it is useful). Signed-off-