DELTA 235873 6295 88 SVND!f*0AWdSeptember 15a.Pp In addition, there are several ways in which an unprivileged user outside the jail can cooperate with a privileged user inside the jail and thereby obtain elevated privileges in the host environment. Most of these attacks can be mitigated by ensuring that the jail root is not accessible to unprivileged users in the host environment. Regardless, as a general rule, untrusted users with privileged access to a jail should not be given access to the host environment. ENDREP id: 2s-46155.0.r240563/549 type: file pred: 2s-46155.0.r236509/3887 count: 126 text: 240563 0 521 37025 071086676dfe2e27f901e902ee73ecc4 96946d25209e580589dbc07781242bec382f1f56 240562-55ma/_4 props: 168398 21485 38 0 b6b34f029ed66be42751a530d6e4b830 cpath: /head/usr.sbin/jail/jail.8 copyroot: 0 / PLAIN K 8 Makefile V 29 file 2p-46155.0.r234712/14499 K 9 command.c V 34 file 6-214117.0-234712.r236198/332 K 8 config.c V 34 file 8-214117.1-234712.r239621/157 K 6 jail.8 V 27 file 2s-46155.0.r240563/549 K 6 jail.c V 28 file 2u-46155.0.r239602/6290 K 11 jail.conf.5 V 35 file c-214117.2-234712.r236509/4190 K 9 jaillex.l V 33 file e-214117.3-234712.r234934/55 K 7 jailp.h V 34 file g-214117.4-234712.r236198/976 K 11 jailparse.y V 36 file i-214117.5-234712.r234712/12012 K 7 state.c V 36 file k-214117.6-234712.r234712/12380 END ENDREP id: 2o-46155.0.r240563/1386 type: dir pred: 2o-46155.0.r239621/1041 count: 167 text: 240563 849 524 524 38be9a7541aff2bfe5f1be12343a57ca props: 234712 15348 326 0 4c42725279d09e0e6cc9eeb1b377051f cpath: /head/usr.sbin/jail copyroot: 0 / minfo-cnt: 1 minfo-here: y PLAIN K 9 IPXrouted V 26 dir 2-11820.0.r231817/1360 K 8 Makefile V 33 file 24-1553.6-1554.r239685/68244 K 14 Makefile.amd64 V 27 file 4-212525.0.r216322/107 K 12 Makefile.arm V 27 file 6-212525.0.r232908/439 K 13 Makefile.i386 V 28 file 8-212525.0.r212525/2377 K 13 Makefile.ia64 V 27 file a-212525.0.r212525/116 K 12 Makefile.inc V 33 file 27-1553.7-1554.r201390/43477 K 13 Makefile.mips V 29 file c-212525.0.r233644/35649 K 16 Makefile.powerpc V 27 file g-212525.0.r212525/500 K 16 Makefile.sparc64 V 28 file i-212525.0.r212525/1658 K 2 ac V 26 dir b-1554.0.r240506/39573 K 6 accton V 26 dir d-1554.0.r201390/92943 K 4 acpi V 29 dir 1l-65047.0.r239340/155389 K 7 adduser V 24 dir 2-5263.0.r240530/762 K 3 amd V 26 dir f-1554.0.r231118/16987 K 9 ancontrol V 26 dir 1k-55992.0.r238221/640 K 3 apm V 24 dir 2-3259.0.r227249/940 K 4 apmd V 27 dir 2-48731.0.r237015/15388 K 3 arp V 27 dir 15-1554.0.r240073/11435 K 8 arpaname V 28 dir w-224093.0.r224093/30864 K 3 asf V 29 dir 2-116009.0.r206622/239756 K 5 audit V 28 dir 4-155213.0.r201390/92261 K 6 auditd V 28 dir 8-155213.0.r204352/20883 K 11 auditreduce V 28 dir c-155213.0.r201390/32353 K 6 authpf V 30 dir 18-126385.0.r240494/122068 K 9 bluetooth V 28 dir 58-107120.0.r236500/6691 K 8 boot0cfg V 27 dir 2-44197.0.r233455/17324 K 9 boot98cfg V 25 dir 4-64126.0.r174764/566 K 10 bootparamd V 26 dir 2-6752.0.r233510/85903 K 9 bsdconfig V 29 dir c-238438.0.r240518/135238 K 10 bsdinstall V 26 dir 7-218799.0.r239500/842 K 6 bsnmpd V 28 dir 1h-122405.0.r240354/2779 K 5 btxld V 27 dir 2-39093.0.r201390/29595 K 6 burncd V 27 dir 7-55522.0.r228976/16802 K 9 cdcontrol V 28 dir 4-10099.0.r233648/264165 K 6 chkgrp V 27 dir 2-36332.0.r228976/12196 K 5 chown V 25 dir 19-1554.0.r227251/930 K 6 chroot V 25 dir 1b-1554.0.r227223/736 K 6 ckdist V 28 dir 2-21919.0.r213573/161935 K 11 clear_locks V 29 dir 4m-177633.0.r208291/91682 K 6 config V 27 dir 1d-1554.0.r235789/34685 K 10 cpucontrol V 27 dir 19-181430.0.r236504/879 K 9 crashinfo V 26 dir 4-181335.0.r232666/792 K 4 cron V 26 dir 2-2312.0.r239991/52385 K 6 crunch V 25 dir 2-1723.0.r237625/3459 K 6 ctladm V 27 dir 2y-229997.0.r239074/641 K 3 ctm V 25 dir 2-2887.0.r228659/1082 K 6 daemon V 25 dir 4-82547.0.r236551/858 K 9 dconschat V 28 dir 1b-121468.0.r233195/3017 K 12 ddns-confgen V 29 dir 10-224093.0.r224093/32655 K 7 devinfo V 26 dir 2-75752.0.r227252/1043 K 7 digictl V 27 dir 3i-76195.0.r236500/9590 K 8 diskinfo V 27 dir 4-113287.0.r232738/1009 K 16 dnssec-dsfromkey V 29 dir pk-193149.0.r201390/41428 K 19 dnssec-keyfromlabel V 29 dir po-193149.0.r201390/47803 K 13 dnssec-keygen V 28 dir u-135569.0.r201390/21654 K 13 dnssec-revoke V 29 dir 14-224093.0.r224093/28509 K 14 dnssec-settime V 29 dir 18-224093.0.r224093/34830 K 15 dnssec-signzone V 28 dir y-135569.0.r224093/29048 K 7 dumpcis V 28 dir 4-185032.0.r201390/73525 K 7 editmap V 27 dir 4-90797.0.r201390/77638 K 7 edquota V 28 dir 1n-1554.0.r233648/266006 K 6 eeprom V 27 dir 2-129590.0.r203972/5080 K 9 etcupdate V 26 dir j-238423.0.r238428/690 K 7 extattr V 27 dir 2-102607.0.r208004/1250 K 10 extattrctl V 26 dir 4-59247.0.r216292/1234 K 6 faithd V 27 dir 1y-56668.0.r233522/8466 K 9 fdcontrol V 25 dir 2-4008.0.r208593/2092 K 8 fdformat V 25 dir 2-1023.0.r218910/2945 K 6 fdread V 25 dir 2-76590.0.r227253/929 K 7 fdwrite V 26 dir 2-2850.0.r233510/90408 K 7 fifolog V 28 dir 2-176998.0.r235789/33166 K 7 flowctl V 27 dir 4-135380.0.r236808/1444 K 14 freebsd-update V 28 dir h-161748.0.r235873/41287 K 9 ftp-proxy V 30 dir 18-171173.0.r240494/123060 K 9 fwcontrol V 27 dir 4-108441.0.r236500/8935 K 9 genrandom V 29 dir 1e-224093.0.r224093/32035 K 7 getfmac V 29 dir 4-105756.0.r201390/123934 K 7 getpmac V 28 dir c-105756.0.r201390/94242 K 7 gpioctl V 29 dir 4-213238.0.r233648/257555 K 4 gssd V 28 dir 63-184588.0.r236500/8130 K 5 gstat V 29 dir 4-112444.0.r201390/130013 K 3 i2c V 28 dir 4-187712.0.r235873/42586 K 8 ifmcstat V 26 dir 1i-55163.0.r237256/572 K 5 inetd V 27 dir 1r-1554.0.r239991/53191 K 6 iostat V 25 dir 1t-1554.0.r228661/804 K 10 ip6addrctl V 28 dir 4-121748.0.r201390/84635 K 8 ipfwpcap V 26 dir 2-151427.0.r238612/975 K 14 isc-hmac-fixup V 29 dir 1i-224093.0.r224093/29707 K 6 isfctl V 28 dir r-239685.0.r239685/69724 K 4 jail V 27 dir 2o-46155.0.r240563/1386 K 5 jexec V 28 dir b-113277.0.r201390/85285 K 3 jls V 27 dir j-113277.0.r232613/1085 K 10 kbdcontrol V 26 dir 2-2088.0.r228976/13622 K 6 kbdmap V 24 dir 2-7303.0.r237257/649 K 7 keyserv V 27 dir 2-26235.0.r239991/54070 K 5 kgmon V 27 dir 1v-1554.0.r228990/92469 K 5 kgzip V 28 dir 2-48906.0.r140442/132774 K 7 kldxref V 25 dir 4-83322.0.r237258/945 K 9 lastlogin V 26 dir 4-68723.0.r222767/2270 K 9 lmcconfig V 26 dir f-150850.0.r239988/751 K 3 lpr V 25 dir z-1553.0.r240351/7681 K 10 lptcontrol V 27 dir 2-2471.0.r201390/121864 K 9 mailstats V 28 dir 2-38095.0.r201390/103671 K 11 mailwrapper V 25 dir 7-54817.0.r213749/710 K 6 makefs V 34 dir 1-185222.0-186335.r239952/1446 K 7 makemap V 28 dir 2-38097.0.r201390/144851 K 6 manctl V 26 dir 2-1367.0.r99968/128409 K 10 memcontrol V 25 dir 2-45411.0.r227254/613 K 11 mergemaster V 25 dir 2-52401.0.r228122/681 K 7 mfiutil V 27 dir e-196200.0.r237329/2446 K 5 mixer V 25 dir 2-6449.0.r230611/1920 K 9 mld6query V 26 dir 2-62915.0.r216586/2061 K 10 mlxcontrol V 28 dir 2-59139.0.r229997/281545 K 10 mount_nwfs V 26 dir c-52252.0.r204710/1189 K 14 mount_portalfs V 27 dir 4p-1558.0.r230226/19045 K 11 mount_smbfs V 27 dir q-87874.0.r201390/21092 K 6 mountd V 25 dir 5g-1558.0.r239744/785 K 6 moused V 25 dir 2-16566.0.r233090/515 K 7 mptable V 25 dir 2-25265.0.r229466/514 K 7 mptutil V 26 dir 4-196212.0.r236287/923 K 5 mtest V 27 dir 2-20530.0.r233455/14310 K 5 mtree V 26 dir 2j-1554.0.r233455/6030 K 5 named V 27 dir 2-2981.0.r225361/149152 K 15 named-checkconf V 29 dir 2r-135549.0.r224093/34168 K 15 named-checkzone V 29 dir 2v-135549.0.r201390/69633 K 18 named-journalprint V 29 dir 1q-224093.0.r224093/33285 K 7 nandsim V 27 dir 57-235537.0.r235607/846 K 8 nandtool V 28 dir 5p-235537.0.r235544/6858 K 7 ndiscvt V 27 dir 2-123475.0.r236509/2054 K 3 ndp V 27 dir 24-55505.0.r238273/8865 K 9 newsyslog V 27 dir 2-13245.0.r238281/21625 K 6 nfscbd V 29 dir 4-192811.0.r211397/125353 K 4 nfsd V 27 dir 5s-1558.0.r235317/60165 K 12 nfsdumpstate V 26 dir c-192811.0.r210272/549 K 9 nfsrevoke V 27 dir k-192811.0.r193070/4553 K 8 nfsuserd V 27 dir s-192811.0.r223382/1326 K 5 ngctl V 27 dir 8t-52419.0.r216588/2827 K 6 nghook V 28 dir 9n-52419.0.r201390/67815 K 7 nologin V 26 dir 60-1558.0.r169439/1113 K 4 nscd V 28 dir 3q-158115.0.r238095/2295 K 9 nsec3hash V 29 dir 1u-224093.0.r224093/35453 K 3 ntp V 27 dir 2-54552.0.r235337/23252 K 5 nvram V 27 dir 11-160892.0.r239733/724 K 7 ofwdump V 29 dir 2-105401.0.r201390/129367 K 13 pc-sysinstall V 27 dir 7-209513.0.r240165/6959 K 7 pciconf V 26 dir 2-19103.0.r240474/2152 K 8 periodic V 26 dir 2-28113.0.r231568/1678 K 3 pkg V 27 dir 4-234313.0.r239664/2740 K 11 pkg_install V 24 dir 2-328.0.r240476/4300 K 11 pmcannotate V 26 dir 4-185347.0.r213928/535 K 10 pmccontrol V 27 dir 31-145256.0.r228671/543 K 7 pmcstat V 28 dir 39-145256.0.r239571/1229 K 7 pnpinfo V 27 dir 2-29619.0.r201390/63741 K 8 portsnap V 27 dir h-148871.0.r239078/2031 K 6 powerd V 26 dir 2-142577.0.r234070/570 K 3 ppp V 26 dir 37-6059.0.r240235/6894 K 6 pppctl V 28 dir 4-27008.0.r206622/238921 K 9 praliases V 27 dir 2-38096.0.r201390/18412 K 7 praudit V 29 dir g-155213.0.r201390/107729 K 7 procctl V 27 dir b-31565.0.r201390/25635 K 5 pstat V 27 dir 2n-1554.0.r225847/22501 K 2 pw V 27 dir 2-20254.0.r231994/30183 K 8 pwd_mkdb V 25 dir 2p-1554.0.r227257/651 K 4 quot V 27 dir 2r-1554.0.r217769/22422 K 7 quotaon V 26 dir 2t-1554.0.r229384/1505 K 5 rarpd V 25 dir 2-6824.0.r238300/1001 K 8 repquota V 27 dir 2v-1554.0.r207736/41517 K 9 rip6query V 26 dir 1y-55163.0.r227258/674 K 3 rmt V 25 dir 2x-1554.0.r227259/869 K 4 rndc V 29 dir 33-135549.0.r224093/31390 K 12 rndc-confgen V 29 dir 37-135549.0.r224093/27853 K 7 route6d V 29 dir 26-55163.0.r228990/101505 K 9 rpc.lockd V 26 dir 5-14124.0.r240350/2178 K 9 rpc.statd V 27 dir 5-14126.0.r231118/19910 K 11 rpc.umntall V 27 dir 4-53494.0.r201390/54196 K 13 rpc.yppasswdd V 27 dir 2-14063.0.r231994/28467 K 13 rpc.ypupdated V 27 dir 2-26237.0.r231118/21586 K 10 rpc.ypxfrd V 27 dir 2-16126.0.r231118/25289 K 7 rpcbind V 28 dir 7c-74462.0.r228990/99475 K 7 rrenumd V 28 dir 2e-55505.0.r201390/65243 K 8 rtadvctl V 35 dir 6-224006.0-224144.r235873/39709 K 6 rtadvd V 28 dir 2u-55505.0.r235873/47260 K 6 rtprio V 24 dir 4-2447.0.r235293/582 K 6 rtsold V 26 dir 2m-55163.0.r230357/778 K 5 rwhod V 27 dir 2z-1554.0.r240506/40266 K 2 sa V 24 dir 2-3126.0.r228681/764 K 4 sade V 25 dir 5-8098.0.r230358/1405 K 8 sendmail V 27 dir 31-1554.0.r232263/29054 K 7 service V 26 dir 4-200743.0.r224672/529 K 13 services_mkdb V 26 dir 4-206156.0.r213442/843 K 6 setfib V 28 dir 2l-178888.0.r236509/8730 K 7 setfmac V 29 dir i-105756.0.r206622/242441 K 7 setpmac V 29 dir q-105756.0.r206622/237616 K 9 sicontrol V 26 dir 2-10045.0.r179668/2667 K 6 smbmsg V 28 dir 2-129331.0.r235873/40604 K 8 snapinfo V 27 dir 2-148197.0.r227260/1062 K 8 spkrtest V 24 dir 2-3763.0.r217364/516 K 5 spray V 25 dir 2-13243.0.r227261/714 K 7 syslogd V 26 dir 4f-1554.0.r240409/1678 K 7 tcpdchk V 27 dir 4-44747.0.r201390/17211 K 9 tcpdmatch V 27 dir 8-44747.0.r201390/26861 K 7 tcpdrop V 27 dir 8-141381.0.r222765/2653 K 7 tcpdump V 24 dir u-3.0.r240518/136248 K 5 timed V 26 dir 4h-1554.0.r240388/3123 K 10 traceroute V 26 dir 4t-1554.0.r216184/6263 K 11 traceroute6 V 26 dir 34-55163.0.r235138/681 K 4 trpt V 26 dir 4v-1554.0.r189090/9126 K 7 tzsetup V 25 dir 2-2751.0.r232297/1253 K 8 uathload V 26 dir t-190688.0.r218749/778 K 6 ugidfw V 28 dir 4-101209.0.r210641/39595 K 7 uhsoctl V 26 dir r-202181.0.r229467/523 K 9 usbconfig V 29 dir j4-184610.0.r219048/27749 K 7 usbdump V 26 dir 2-215651.0.r238279/462 K 3 utx V 33 dir 8-218847.0-231530.r235967/557 K 10 vidcontrol V 24 dir 2-2089.0.r237777/926 K 4 vipw V 25 dir 51-1554.0.r231648/950 K 4 wake V 26 dir 4-195200.0.r232102/729 K 5 watch V 24 dir 9-6521.0.r232781/671 K 9 watchdogd V 27 dir n-116874.0.r239896/1005 K 9 wlandebug V 30 dir 12-153317.0.r233648/260158 K 8 wlconfig V 27 dir 2-26006.0.r233522/10121 K 3 wpa V 27 dir 2-147020.0.r238606/1269 K 7 yp_mkdb V 25 dir 2-15424.0.r228722/655 K 6 ypbind V 24 dir 2-1927.0.r226690/686 K 6 yppoll V 25 dir 4-1929.0.r203972/4033 K 6 yppush V 27 dir 2-13395.0.r231118/26067 K 6 ypserv V 27 dir 2-12892.0.r233455/16611 K 5 ypset V 26 dir a-1929.0.r201390/24997 K 3 zic V 26 dir 2-2703.0.r223758/54396 K 3 zzz V 28 dir 2-117557.0.r130420/15225 END ENDREP id: q-3.0.r240563/12256 type: dir pred: q-3.0.r240530/11544 count: 13118 text: 240563 1651 10592 10592 cdac8538ca8e9e685699e18a31ac48b1 cpath: /head/usr.sbin copyroot: 0 / minfo-cnt: 6 PLAIN K 9 COPYRIGHT V 25 file 1-2656.0.r229067/453 K 5 LOCKS V 27 file 1-146890.0.r179574/251 K 11 MAINTAINERS V 26 file 1-94742.0.r240316/214 K 8 Makefile V 30 file 3-1594.0-1595.r240403/117 K 13 Makefile.inc1 V 27 file 5-38666.0.r240468/2300 K 17 ObsoleteFiles.inc V 27 file 4-148330.0.r240264/265 K 6 README V 26 file 1-21173.0.r215293/415 K 8 UPDATING V 27 file 1-41806.0.r240233/1681 K 3 bin V 23 dir 1-5.0.r240541/10374 K 4 cddl V 28 dir 1-168404.0.r240415/59625 K 7 contrib V 28 dir 1-16755.0.r240531/113983 K 6 crypto V 26 dir 1-25405.0.r240339/7777 K 3 etc V 24 dir 1-38.0.r240343/12183 K 5 games V 25 dir 1-2491.0.r238879/7513 K 3 gnu V 22 dir 1-3.0.r239695/3160 K 7 include V 25 dir 1-697.0.r240494/17504 K 9 kerberos5 V 28 dir 4q-29815.0.r236422/13814 K 3 lib V 23 dir 6-5.0.r240518/34310 K 7 libexec V 23 dir c-5.0.r240506/13148 K 7 release V 26 dir 1-3027.0.r240519/31986 K 6 rescue V 28 dir 7-117035.0.r238926/22095 K 4 sbin V 23 dir fa-4.0.r240497/6026 K 6 secure V 26 dir r-1553.0.r240075/84736 K 5 share V 23 dir e-3.0.r240561/22839 K 3 sys V 22 dir g-5.0.r240551/5513 K 5 tools V 28 dir 43-1590.0.r240518/119415 K 7 usr.bin V 23 dir m-3.0.r240562/37317 K 8 usr.sbin V 23 dir q-3.0.r240563/12256 END ENDREP id: 5-1.0.r240563/13667 type: dir pred: 5-1.0.r240562/38728 count: 169825 text: 240563 12442 1212 1212 78800426ab696e9ee754be3d9611f260 props: 233713 14925 417 0 fe95f2ac252be6f08902a979c27a022c cpath: /head copyroot: 0 / minfo-cnt: 109 minfo-here: y PLAIN K 11 ROADMAP.txt V 27 file 0-179453.0.r221478/293 K 7 cvs2svn V 23 dir 0-1.0.r177821/70859 K 4 head V 23 dir 5-1.0.r240563/13667 K 8 projects V 24 dir 6-1.0.r240222/602326 K 7 release V 22 dir 7-1.0.r234063/2758 K 6 releng V 23 dir 8-1.0.r240558/35953 K 6 stable V 24 dir 9-1.0.r240560/191109 K 8 svnadmin V 27 dir 0-179447.0.r240538/2674 K 4 user V 24 dir a-1.0.r240511/319783 K 6 vendor V 22 dir b-1.0.r240456/9826 K 13 vendor-crypto V 25 dir 0-1575.0.r239851/3086 K 10 vendor-sys V 26 dir 0-12116.0.r240526/4917 END ENDREP id: 0.0.r240563/14451 type: dir pred: 0.0.r240562/39512 count: 240563 text: 240563 13919 519 519 ec180d8b8824670ceb3118965df5f13b cpath: / copyroot: 0 / minfo-cnt: 27438 2s-46155.0.t240562-55ma modify-file true false /head/usr.sbin/jail/jail.8 14451 14622