Dear Vserver Community!

we discovered that there is a security issue
in all vserver versions, which will be solved
soon, but for now it would be best to mount
the procfs read only on your vserver host.

this can be done with:

 mount -o remount,ro /proc

if access to the procfs is required on the
host again (before a reboot, or for some other
configurations) you can remount the procfs
read-write again ...

 mount -o remount,rw /proc

as you can imagine, it has to do with write
access to specific proc entries from a vserver
context ...

best,
Herbert

_______________________________________________
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to