-----BEGIN PGP SIGNED MESSAGE----- On Thursday 27 Feb 2003 4:14 pm, Stalker, Doug wrote:
> I'm creating an environment to use with chroot. Hmm, whilst a hard link in that situation will save on disk space, if you're doing this for security then I would counsel against it. This is because if they compromise the chroot'd environment and modify one of the symbolic links then they will have modified that file in the external environment (probably not what you want!). Of course, if an attacker manages to get root in the chroot'd environment and can import code then it is possible for them to escape the chroot jail. :-( cheers, Chris - -- Chris Samuel : http://csamuel.org/ : Wollongong, NSW -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iQEVAwUBPl2iT41yjaOTJg85AQECiAf9FdGA1zzQTh/0VENrhV81xEMiraKzz8V6 XHpUCPh914Czoatb0Bo87qQGZUpgsT8e1A2wFx4JK1YmytXSlOmNvhEhd3HmTfvx xOHEEubyEDFa106YH8iyiBRivpSweDvnbN1aZgUM+XccH5cLJCaLXIDYB83VVJCE 6/HEbxYjZhDMVylNaYzsdWbuv5i0QqMeZgXQFVjXlcGySibeXm1U/7QeUAbk6cCv 4KLn3sxLkeUPp6yUNWNk56sdszrVqeMJI8HneTC5PfgagoFFF/jIFaCy/8AneKDn SpXIIKMvU6FUehYoTygPRmmvP9aYQ+m8i8jiUyrc/OL9SIIjIKPl/A== =jkYH -----END PGP SIGNATURE----- -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
