[1012] in athena10
Re: Failsafe xterm and breaking out of the chroot
daemon@ATHENA.MIT.EDU (Evan Broder)
Tue Jan 27 20:42:29 2009
Message-ID: <497FB7BD.1030707@mit.edu>
Date: Tue, 27 Jan 2009 20:41:17 -0500
From: Evan Broder <broder@MIT.EDU>
MIME-Version: 1.0
To: Anders Kaseorg <andersk@mit.edu>
CC: "Aaron M. Ucko" <ucko@debian.org>, debathena@mit.edu
In-Reply-To: <alpine.DEB.2.00.0901272038020.27161@vinegar-pot.mit.edu>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Anders Kaseorg wrote:
> On Tue, 27 Jan 2009, Aaron M. Ucko wrote:
>> Is /proc/1/root/... too much of a kludge?
>
> /proc/1/root is just a symlink; it points to the path (/), not the
> actual inode. You can’t break out of a chroot with a symlink.
>
> Anders
It looks like a symlink, but it doesn't seem to be - cat
/proc/1/root/etc/group and /etc/group from within a login session give
me different things (as part of the login process, the user is added to
a bunch of groups within the chroot)
- Evan
