Subject: Re: [vserver] Are bind mounts to outside the /vserver base a security risk?
From: Johan <list.vserver@centerpoint.be>
Date: Mon, 19 Nov 2007 17:41:54 +0100

Hi Ed,

Quoting Ed W <lists@wildgooses.com>:

> If I have my chroot barrier set on /vserver and then bind mount (for
> some reason) something from /var/xxx into a vserver, does this then
> offer an (accidental) way to break out of the chroot using some kind of
> ".." attack on the bind mount?

I don't think mounting another device poses a big _additional_ security risk.

But, if you are concerned about breaking out of virtual hosts, than  
you probably have other worries, as virtual servers are not meant for  
security purposes.


Best regards,

Johan.