Re: svn commit: r224462 - stable/8/usr.sbin/jail

2011-07-28 Thread Robert Watson
On Wed, 27 Jul 2011, Glen Barber wrote: How is either one of these different ? All mv(1) is doing is a cp(1) & rm(1). In either case the filehandle is still broken and a process is not going to just get up and move with it. On the other side though if you copied a pipe or socket or something

Re: svn commit: r224462 - stable/8/usr.sbin/jail

2011-07-27 Thread Glen Barber
On 7/28/11 12:52 AM, Jason Hellenthal wrote: >> This is not always true when the source and destination live on the >> same filesystem. See rename(2). >> Via VOP_RENAME, individual filesystems can override this behavior if >> needed (e.g. for AFS where permissions are per-directory, so a >> cross-

Re: svn commit: r224462 - stable/8/usr.sbin/jail

2011-07-27 Thread Glen Barber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 7/27/11 10:19 PM, Jason Hellenthal wrote: >> +.Sh NOTES +Great care should be taken when managing directories >> visible within the jail. +For example, if a jailed process has its >> current working directory set to a +directory that is moved out

Re: svn commit: r224462 - stable/8/usr.sbin/jail

2011-07-27 Thread Ben Kaduk
On Wed, Jul 27, 2011 at 10:19 PM, Jason Hellenthal wrote: > > > On Wed, Jul 27, 2011 at 01:56:52AM +, Glen Barber wrote: >> Author: gjb (doc committer) >> Date: Wed Jul 27 01:56:52 2011 >> New Revision: 224462 >> URL: http://svn.freebsd.org/changeset/base/224462 >> >> Log: >>   MFC 224286: >>

svn commit: r224462 - stable/8/usr.sbin/jail

2011-07-26 Thread Glen Barber
Author: gjb (doc committer) Date: Wed Jul 27 01:56:52 2011 New Revision: 224462 URL: http://svn.freebsd.org/changeset/base/224462 Log: MFC 224286: Document the potential for jail escape. PR: 142341 Modified: stable/8/usr.sbin/jail/jail.8 Directory Properties: stable/8/us