Re: symlinks and security (was Re: [MLUG] Found tomcat problem)

[Mark Rages <EMAIL:PROTECTED>]

On Wed, Apr 16, 2003 at 10:40:48AM -0700, EMAIL:PROTECTED wrote:
> 
> I would suspect it's a chroot issue.  If the symlink is to something 
> outside of the chroot sandbox the server won't even be able to see it.  Do 
> symlinks work if they are to something else within the chroot filesystem?  
> i.e. ../../src is outside ../ but ../src is not.  There might be a way to 
> change the behavior of symlinks beyond a chroot, but it would be 
> discouraged. 
> I forget the name of the other projects that do similar things to chroot. 
> So just take chroot to mean any alternative/virtual root directory system. 
> 
> -Stuart 
> 

Symlinks are evaluated when they are called, I believe. So it just
depends on if there is something in your chroot that matches the
symlink.

A totally unrelated symlink note:

Different shells handle symlinks in different ways:
[EMAIL:PROTECTED mark]$ bash
[EMAIL:PROTECTED mark]$ mkdir a  
[EMAIL:PROTECTED mark]$ ln -s a b
[EMAIL:PROTECTED mark]$ cd b 
[EMAIL:PROTECTED b]$ pwd
/home/mark/b
[EMAIL:PROTECTED b]$ tcsh
[EMAIL:PROTECTED ~/b]$ pwd
/home/mark/a

Regards,
Mark
EMAIL:PROTECTED

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members