Bug 55482
| Summary: | document the fact that DUMP has access to block devices in a JAIL | ||
|---|---|---|---|
| Product: | Documentation | Reporter: | slave-mike <slave-mike> |
| Component: | Books & Articles | Assignee: | freebsd-doc (Nobody) <doc> |
| Status: | Closed FIXED | ||
| Severity: | Affects Only Me | ||
| Priority: | Normal | ||
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
Responsible Changed From-To: gnats-admin->freebsd-bugs Reassign misfiled PR. State Changed From-To: open->closed This behaviour can be mitigated by use of devfs(8) to remove undesired devices from the jailed /dev. There also exists a facility in /etc/rc.d/devfs to impose devfs rules on boot, via /etc/devfs.conf. However, there is no manpage for devfs.conf, and I suspect that there does deserve to be one, so I am reassigning this as a doc-bug. State Changed From-To: closed->open I meant to reassign this to doc, and not close it. Class Changed From-To: sw-bug->doc-bug I meant to reassign this to doc, and not close it. Responsible Changed From-To: freebsd-bugs->freebsd-doc I meant to reassign this to doc, and not close it. Just a slight correction, for the archives: devfs rules go in /etc/devfs.rules, not /etc/devfs.conf Colin Percival State Changed From-To: open->suspended Mark suspended awaiting patches. State Changed From-To: suspended->closed there is a devfs.conf manual page now |
A jailed root user can use DUMP and gain a snapshot of the entire disk. From there the jailed root user can restore files from the HOST SYSTEM or any other jails at their leisure. Even if DEVFS is not mounted, a root user could possibly create a device node anyways, and one needs TTYS anyways. Some sort of check is not occurring in the disk access code that is needed to prevent JAILED users ANY raw access to the disk. Fix: Add security checks on device access to prevent jailed users from gaining access to things they don't need access to. If this is a setting which can be changed, the default behavior needs to be more security conscious, or at least very very very clearly documented. How-To-Repeat: Run DUMP in a jailed environment.