Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

RE: Chroot jails

Subject: RE: Chroot jails
Date: Wed, 21 Sep 2005 05:55:05 +1000
Hi
 
Like everything - they have been broken at one time or another, patch issues as 
they arrise and this will cover most things. A Good implementation will help 
further.
 
People find overflows in code from time to time, we have to patch from time to 
time - this does not mean to not do this, just like everything else... 
vigilance is the key
 
Craig

        -----Original Message----- 
        From: JamesHorwath@glic.com [mailto:JamesHorwath@glic.com] 
        Sent: Wed 21/09/2005 3:29 AM 
        To: Steve.Cummings@barclayscapital.com 
        Cc: pentest@securityfocus.com; webappsec@securityfocus.com 
        Subject: Re: Chroot jails
        
        
Steve,

Use mod_security by Ivan Ristic, you can setup a chroot jail painlessly in
minutes.  On the small implementations I used momd_security I didn't find
it any harder to manage.

Regards,
Jim

Jim Horwath
SANS Certified: GCUX, GCIH, GHTQ
Unix Admin


<Steve.Cummings@barclayscapital.com> wrote on 09/20/2005 12:21:02 PM:

Hi All

Wondered if people could give me their opinions on chroot jails on
solaris and linux, am interested in both manageability but more
interested in whether anyone has broken out of one



<Prev in Thread] Current Thread [Next in Thread>