Security issue in kernel-vserver (all versions)

[Jan Rekorajski]

On Fri, 28 Apr 2006, Arkadiusz Miskiewicz wrote:

> On Thursday 27 April 2006 12:03, Jan Rekorajski wrote:
> > There is a serious security issue with all versions of linux-vserver.
> > All versions 2.0 and above are vulnerable.
> >
> > Description:
> > Setting context capability (ccapabilities) gives rights to use
> > operations allowed by this capability to all users inside vserver.
> >
> > All users of kernel-vserver are urged to upgrade to latest kernel from
> > CVS.
> 
> Trzeba na coś uważać przy upgrade? np. wymaganie nowszych utilsów, coś w 
> konfigu zmienione etc?

Moge sie wypowiedziec tylko o czesci vserverowej - zrob upgrade
util-vserver do tego co jest w main, poza tym zostal wylaczone Dynamic
Context allocation (patrz www.pld-linux.org/Vserver).

Janek
-- 
Jan Rękorajski            |  ALL SUSPECTS ARE GUILTY. PERIOD!
baggins<at>mimuw.edu.pl   |  OTHERWISE THEY WOULDN'T BE SUSPECTS, WOULD THEY?
BOFH, MANIAC              |                   -- TROOPS by Kevin Rubio