OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Possible security issue with jails

From: Micah (micahmicah.ws)
Date: Tue Jan 11 2005 - 16:10:55 CST


Howdy!

I'm not sure if this is actually an issue, feature or a bug, but I have found
that inside a jail, the jailed root user is able to sniff traffic (and enable
promiscuous mode) on at least the interface of the IP address the jail is attached
to.

I have not found any documentation explaining if this should occur or not, but
I feel it is something that should at least be known to those using jails.

Please let me know if anyone knows if this is an error, a problem that can't be fixed,
or if it's designed to be this way.

Thanks!

-Micah
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"