On Sun, 2006-02-26 at 11:03 -0500, seth vidal wrote:
The fhs is our friend. :) However I don't think we're suggesting
changing the default location for mock just making it possible for
someone else to do something like that. And if we can do that securely
then, sure.
You've hit the nail on the head. I realize that some folks think badly
of NFS and don't want to use it. That's fine (yeah, I'm not in love with
NFS, but I still want to use it), but what if someone's using
FibreChannel or InfiniBand attached storage? My argument that we should
be able to move the root is still valid.
So, back to my original question: if we *exclude* certain directories as
candidates for chroot'ing, can we securely move the root? I'm thinking
of something like the attached patch (minus the #ifdefs).
Clark
--
Clark Williams <williams(a)redhat.com>