Re: [Jailkit-users] How to jail Opera or Firefox...?

[Olivier Sessink]

Hubert Havel wrote:
> The question I have
> is this: By using sockets to connect applications outside and inside the
> chroot directory,
> wouldn't this be somewhat risky since compromised applications running
> inside chroot can
> perhaps spread to outside of the chroot environment through the sockets?

that depends on the application that is listening to the socket. If that
application is buggy and allows buffer overflows through the socket,
yes, you have a risk that an attacker might break out of the chroot. But
if the application is reasonably programmed there should be little problem.

regards,
        Olivier