Firewall Wizards mailing list archives

Re: chroot useful?

From: Andreas Siegert <afx () ibm de>
Date: Tue, 11 Nov 1997 11:37:57 +0100


Quoting Joseph S. D. Yao (jsdy () cospo osis gov):

And DON'T let them bring in their own fun little binaries.


If you run a system that supports a TCB shell, that can be secured as well.
Only allow the execution of programs that have the tcb bit set, then they can
ftp binaries as much as they want, they will not be able to execute them....

bye
afx
-- 
Andreas Siegert       afx () ibm de / afx () barolo munich de ibm com / AFX at IPNET
PGP Key:http://www.muc.de/~afx/pubkey.asc, KeyId AB26FD05

Current thread:

chroot useful? Claudio Telmon (Nov 08)
- Re: chroot useful? Darren Reed (Nov 09)
  - Re: chroot useful? Claudio Telmon (Nov 09)
- Re: chroot useful? Joseph S. D. Yao (Nov 10)
  - Re: chroot useful? Andreas Siegert (Nov 12)
- Re: chroot useful? chuck+fwwiz (Nov 10)
- <Possible follow-ups>
- Re: chroot useful? Paul McNabb (Nov 12)
  - Re: chroot useful? Steven M. Bellovin (Nov 13)
    - Re: chroot useful? C Matthew Curtin (Nov 21)
- Re: chroot useful? Paul McNabb (Nov 12)
- Re: chroot useful? Douglas R. Steinbaum (Nov 13)
  - Re: chroot useful? Darren Reed (Nov 14)
  - Re: chroot useful? Steven M. Bellovin (Nov 14)
    - Re: chroot useful? Aleph One (Nov 14)
    - Re: chroot useful? Steven M. Bellovin (Nov 15)

(Thread continues...)