OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andrew Brown (atatatatatdot.net)
Date: Tue Jul 17 2001 - 14:58:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > (I do not even think that the fchdir() checks should be done. I've used
    >used the fact that you can fchdir() out of the chroot in some applications)

    from vfs_syscalls.c:

         1 /* $NetBSD: vfs_syscalls.c,v 1.167 2001/06/28 08:04:18 jdolecek Exp $ */
    ...
       765 sys_fchdir(p, v, retval)
    ...
       807 /*
       808 * Disallow changing to a directory not under the process's
       809 * current root directory (if there is one).
       810 */
       811 if (cwdi->cwdi_rdir && !vn_isunder(vp, NULL, p)) {
       812 vrele(vp);
       813 error = EPERM; /* operation not permitted */
       814 goto out;
       815 }

    so you can't do that here. not since march '99. 

    -- 
|-----< "CODE WARRIOR" >-----|
codewarriordaemon.org             * "ah!  i see you have the internet
twofsonetgraffiti.com (Andrew Brown)                that goes *ping*!"
andrewcrossbar.com       * "information is power -- share the wealth."