On Sat, Dec 24, 2011 at 2:39 AM, Andrey Chernov <a...@freebsd.org> wrote:
> On Sat, Dec 24, 2011 at 02:26:20AM -0800, Xin LI wrote:
>> chroot(2) can create legitimate and secure environment where dlopen(2)
>> is safe and necessary.
>
> Yes, so ischroot() check can be used only into that places where libc's
> libc_dlopen() currently used, i.e. placed into libc_dlopen() itself.

So it's Okay to break NSS in chroot jail?

Cheers,
-- 
Xin LI <delp...@delphij.net> https://www.delphij.net/
FreeBSD - The Power to Serve! Live free or die
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to