chroot directory must be root owned

Bob Proulx bob at proulx.com
Thu Sep 9 18:04:40 EST 2010


igoh wrote:
> Have you guys found a way to bypass security if the directory is not owned
> by root?

  https://bugzilla.redhat.com/show_bug.cgi?id=522141

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2904

  http://unixwiz.net/techtips/chroot-practices.html

Bob


More information about the openssh-unix-dev mailing list