[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Jailkit-users] How to jail Opera or Firefox...?

From: Olivier Sessink
Subject: Re: [Jailkit-users] How to jail Opera or Firefox...?
Date: Thu, 31 Aug 2006 23:43:59 +0200
User-agent: Thunderbird (X11/20060812)

Hubert Havel wrote:
> The question I have
> is this: By using sockets to connect applications outside and inside the
> chroot directory,
> wouldn't this be somewhat risky since compromised applications running
> inside chroot can
> perhaps spread to outside of the chroot environment through the sockets?

that depends on the application that is listening to the socket. If that
application is buggy and allows buffer overflows through the socket,
yes, you have a risk that an attacker might break out of the chroot. But
if the application is reasonably programmed there should be little problem.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]