Subject: Re: chroot jail for ftpd
To: Andrew Brown <>
From: Jason R Thorpe <>
List: tech-security
Date: 10/18/2001 15:32:51
On Thu, Oct 18, 2001 at 06:20:31PM -0400, Andrew Brown wrote:

 > correct me if i'm wrong, but can't we also add
 > 	(VTOI(vp)->i_ffs_mode & (S_IXUSR | S_IXGRP | S_XOTH)) != 0
 > to that to do what thor was asking about?  hmm...perhaps that kind of
 > construct is verbotten in this part of the kernel...

Yes, highly verbotten.  There is another way to accomplish this.  I'll
take a look, but I would suggest making THAT check dependent on a sysctl
variable that defaults to "off".

        -- Jason R. Thorpe <>