Escape from a bind mount

Jann Horn jann at thejh.net
Thu Sep 22 13:02:53 UTC 2016


On Thu, Sep 22, 2016 at 02:49:12PM +0200, Gandalf Corvotempesta wrote:
> Last year, this thread was posted:
> https://lists.linuxfoundation.org/pipermail/containers/2015-April/035788.html
> 
> is this fixed or is still possible to escape from a bind mount inside
> the container ?

This was fixed by Eric Biederman in the "Bind mount escape fixes" patch series
in August 2015.
Relevant commits are 397d425d and cde93be4 (maybe more? I'm not sure).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.linuxfoundation.org/pipermail/containers/attachments/20160922/71d4fb1d/attachment.sig>


More information about the Containers mailing list