Displaying 1 result from an estimated 1 matches for "36c253cc".
2007 Jul 17
2
kern.chroot_allow_open_directories
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The chroot(2) man page describes a sysctl called
'kern.chroot_allow_open_directories' which controls whether a process
can chroot() and is already subject to the chroot() syscall.
It seems that this sysctl can be trivially changed from within a
chroot'd process (ie: if that process has superuser privileges).
Is this sysctl meant to