Re: sys_chroot+sys_fchdir Fix

Philipp Marek napsal(a): Please, everybody, don't change that. I'm currently using that *feature* (yes, I see it as that) in my fsvs-chrooter-utility (see http://fsvs.tigris.org/source/browse/*checkout*/fsvs/trunk/www/doxygen/html/group__howto__chroot.html) for easier usage of fsvs on older sys

sys_chroot+sys_fchdir Fix

Hello, here is an fix to an exploit (obtained somewhere in internet). This exploit can workaround chroot with CAP_SYS_CHROOT. It is also possible (with sufficient filedescriptor (if there is na directory fd opened in root) workaround chroot with sys_fchdir. This patch fixes it. Miloslav Semle