Re: Improving FreeBSD-SA-07:01.jail fix


Am 20.01.2007 um 13:24 schrieb Simon L. Nielsen:

> BTW. with regard to the console.log file I really don't think it
> should be put back inside the jail unless it's possible to make the
> generation of the file entirely inside the jail since it's just not
> worth the risk/complexity.

I'm probably missing something, but why not replace:
	_jail_id=$(head -1 ${_tmp_jail})
	tail +2 ${_tmp_jail} >${_rootdir}/var/log/console.log
with:
	_jail_id=$(head -1 ${_tmp_jail})
	tail +2 ${_tmp_jail} | jexec ${_jail_id} sh -c "cat >/var/log/ 
console.log"


Stefan

-- 
Stefan Bethke <stb@lassitu.de>   Fon +49 170 346 0140


_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"