From: klavs klavsen (kl_at_vsen.dk)
Date: Thu 01 Aug 2002 - 11:23:22 BST
On Thu, 2002-08-01 at 10:07, Paul Sladen wrote:
> On 1 Aug 2002, klavs klavsen wrote:
> >
> > These measures would greatly enhance the vserver security, as a hacker
> > who got hold of root in your vserver would not be able to install a
> > common root kit for instance.
>
> You *have* root in a vserver. Isn't that the whole point?
You don't have root in the original sence, as you are without the
capabilities that is root ! - to me, that is the whole point (root -
without roots strengths/faults) ! For instance, you can't reconfigure
inet interfaces, set an interface into promiscious mode, you can't
remove files that are set immutable and so on.
The port binding features would just be an added security feature - in
my opinion right along the lines that vserver goes - and which I believe
is why many users use vserver - for the security features, and its
simplicity.
>
> If you're after a slightly more restrictive setup, you maybe more interested
> in FreeVSD which works by having a pseudo-root user `admin' and therefore
> having to proxy anything that does need extra/root permissions, which may
> give you the abstract you seem to be after.
>
> http://www.freevsd.org/
>
> ..and buy a CD or something from Darren and the gang at Idaya to say thanks.
>
I have heard nothing good about freevsd, compared to vserver - and also
I can see from the mailinglists, that vserver is MUCH easier to setup,
so no thanks :-)
-- Regards, Klavs Klavsen-------------| This mail has been sent to you by: |------------ Klavs Klavsen - Open Source Consultant kl_at_vsen.dk - http://www.vsen.dk
Get PGP key from www.keyserver.net - Key ID: 0x586D5BCA Fingerprint = A95E B57B 3CE0 9131 9D15 94DA E1CD 641E 586D 5BCA --------------------[ I believe that... ]----------------------- It is a myth that people resist change. People resist what other people make them do, not what they themselves choose to do... That's why companies that innovate successfully year after year seek their peopl's ideas, let them initiate new projects and encourage more experiments. -- Rosabeth Moss Kanter