Messages in this thread | | | Date | Sun, 4 Nov 2001 22:38:43 -0200 (BRST) | From | Rik van Riel <> | Subject | Re: Special Kernel Modification |
| |
On Sun, 4 Nov 2001, Lonnie Cumberland wrote:
> I have look into using things like "chroot" to restrict the users for > this very special server, but that solution is not what we need.
> My problem is that I need to find a way to prevent the user from > navigating out of their home directories.
chroot() will do that pretty well, but if you want more you can always take a look at vserver:
http://www.solucorp.qc.ca/miscprj/s_context.hc
Not as sophisticated as NSA's selinux, but that also means it's much easier to get security because it's just easier to setup ;)
regards,
Rik -- DMCA, SSSCA, W3C? Who cares? http://thefreeworld.net/
http://www.surriel.com/ http://distro.conectiva.com/
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |