ChrootDirectory security

Peter Stuge peter at stuge.se
Mon Mar 30 11:55:36 EST 2009


Hi,

Alexander Prinsier wrote:
> I'm sure there are no setuid programs in /home, and never will be

How can you be sure? Do you enforce permissions? Are you sure no
other part of the system can (accidentally, or with "help") write
to /home?


//Peter


More information about the openssh-unix-dev mailing list