Re: Improving FreeBSD-SA-07:01.jail fix

Am 20.01.2007 um 13:24 schrieb Simon L. Nielsen:

> BTW. with regard to the console.log file I really don't think it
> should be put back inside the jail unless it's possible to make the
> generation of the file entirely inside the jail since it's just not
> worth the risk/complexity.

I'm probably missing something, but why not replace:
	_jail_id=$(head -1 ${_tmp_jail})
	tail +2 ${_tmp_jail} >${_rootdir}/var/log/console.log
with:
	_jail_id=$(head -1 ${_tmp_jail})
	tail +2 ${_tmp_jail} | jexec ${_jail_id} sh -c "cat >/var/log/ 
console.log"


Stefan

-- 
Stefan Bethke <[e-mail]>   Fon [phone]


_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"