3 ms·
Could you expand on the last sentence? Why is relying on chroot+file permissions inherently bad?
by sriramk 16y ago
Could you expand on the last sentence? Why is relying on chroot+file permissions inherently bad?
- baq 16y agochroot has not been designed as a security feature but as a system testing tool. you only need a local root exploit to get out of chroot. you need additional protection to have a proper jail; freebsd does this, openbsd used to, not sure how it is now.