[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] Re: Root password change



Once upon a time, Michael Holstein <michael.holstein@xxxxxxxxxxx> said:
> if you're chrooted under /tmp (as it sounds from your email) you're out 
> of luck, unless you have a way to escape the chroot due to a 
> misconfiguration of that environment in the first place.

If you are root, chroot is easy to break (that's why chroot is not
secure for root-owned processes).

-- 
Chris Adams <cmadams@xxxxxxxxxx>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/