Re: chroot sockets (was: Introducing the hardening-wrapper package)

2011-06-03 Thread Samuel Thibault
olafbuddenha...@gmx.net, le Thu 02 Jun 2011 04:13:34 +0200, a écrit : > On Tue, May 31, 2011 at 09:35:32AM +0200, Samuel Thibault wrote: > > You just need another partition, run debootstrap in it, and chroot > > into it. You'll need to firmlink servers/socket/{1,2} from the root to > > get named pi

Re: chroot sockets (was: Introducing the hardening-wrapper package)

2011-06-02 Thread Thomas Bushnell, BSG
Cheroot isn't supposed to change the namespace of Unix domain sockets in the case where the chroot shares a file with the main system. On Jun 2, 2011 6:56 PM, wrote: > Hi, > > On Tue, May 31, 2011 at 09:35:32AM +0200, Samuel Thibault wrote: > >> You just need another partition, run debootstrap in

chroot sockets (was: Introducing the hardening-wrapper package)

2011-06-02 Thread olafBuddenhagen
Hi, On Tue, May 31, 2011 at 09:35:32AM +0200, Samuel Thibault wrote: > You just need another partition, run debootstrap in it, and chroot > into it. You'll need to firmlink servers/socket/{1,2} from the root to > get named pipes and network sockets working. Err... What's the use of sharing the p