Poul-Henning Kamp cc7532aaf0 Add a sysctl variable which can help stop chroot(2) escapes.
kern.chroot_allow_open_directories = 0
	chroot(2) fails if there are open directories.

kern.chroot_allow_open_directories = 1 (default)
	chroot(2) fails if there are open directories and the process
	is subject of a previous chroot(2).

kern.chroot_allow_open_directories = anything else
	filedescriptors are not checked.  (old behaviour).

I'm very interested in reports about software which breaks when
running with the default setting.
1999-03-23 14:26:40 +00:00
..
1998-01-11 16:56:01 +00:00
1998-11-16 03:49:39 +00:00
1997-02-22 15:12:41 +00:00
1998-11-19 04:07:55 +00:00
1997-02-22 15:12:41 +00:00
1998-01-11 17:49:51 +00:00
1997-04-01 18:06:33 +00:00
1997-02-22 15:12:41 +00:00
1998-01-11 16:51:49 +00:00
1998-10-30 23:50:48 +00:00
1997-03-11 11:35:56 +00:00
1997-04-11 18:57:26 +00:00
1997-01-20 23:23:22 +00:00
1998-01-11 22:22:50 +00:00
1998-06-04 21:06:07 +00:00
1997-03-11 11:35:56 +00:00
1999-03-10 20:55:23 +00:00
1998-09-09 01:30:25 +00:00
1997-02-22 15:12:41 +00:00
1998-04-19 22:20:32 +00:00
1998-06-06 04:56:13 +00:00
1998-11-24 08:15:08 +00:00
1998-06-06 04:56:13 +00:00
1999-03-15 00:14:57 +00:00
1999-01-26 02:49:52 +00:00
1998-05-14 11:36:16 +00:00
1998-01-16 13:41:28 +00:00
1997-01-20 23:23:22 +00:00
1998-06-04 21:06:07 +00:00
1997-02-22 15:12:41 +00:00
1997-03-21 16:52:05 +00:00
1998-08-31 16:41:09 +00:00
1998-08-31 16:41:09 +00:00
1998-09-12 01:27:34 +00:00
1998-01-02 19:22:52 +00:00
1997-10-16 01:19:15 +00:00
1998-06-04 21:06:07 +00:00
1998-05-14 14:39:58 +00:00
1998-01-02 19:22:52 +00:00
1997-01-20 23:23:22 +00:00
1998-10-21 09:48:35 +00:00
1997-03-11 11:35:56 +00:00
1997-01-20 23:23:22 +00:00
1997-02-22 15:12:41 +00:00
1997-02-22 15:12:41 +00:00
1998-01-02 19:22:52 +00:00