X-Spam-Check-By: sourceware.org
Date: Wed, 5 Apr 2006 12:33:49 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: Cygwin-L <cygwin AT cygwin DOT com>
Subject: Re: Setting up chroot jail with cygwin
Message-ID: <20060405103349.GA23123@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: Cygwin-L <cygwin AT cygwin DOT com>
References: <4433411D DOT 2020207 AT gohilton DOT com> <e0vion$h0b$1 AT sea DOT gmane DOT org> <443355CC DOT 6000804 AT etr-usa DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <443355CC.6000804@etr-usa.com>
User-Agent: Mutt/1.4.2i
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Apr  4 23:29, Warren Young wrote:
> Bryan D. Thomas wrote:
> >"Kevin Hilton" wrote:
> >>Can anyone point me to a link telling me how to set up a chrooted jail
> >>with cygwin?
> >
> >I used this:
> >
> >$ /bin/chroot.exe --help
> 
> Can that be relied upon?  chroot is a system call on Unix and Linux, 
> which is how it can ensure that the process doesn't step outside the 
> box.  Is there a comparable feature in the Windows kernel that provides 
> the same feature?  Lacking that, all a determined hacker would have to 
> do when attacking a buffer overrun bug is make their injected code first 
> attack the cygwin1.dll before doing whatever nefarious task they want to do.

There's no chroot concept in Windows.  Cygwin's chroot is just sort of
a fake to get applications using chroot running.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/