also sprach Steve Kemp <[EMAIL PROTECTED]> [2004.11.07.1514 +0100]:
>   If you're operating a shared system and want to keep seperate
>  web users isolated from each other using rbash, chroots or
>  similar should be sufficient.

Neither rbash not chroots are security measures. They are hurdles at
most, but can be easily circumvented. Use virtual machines instead
of chroots, and process and filesystem ACLs instead of rbash.

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.     martin f. krafft <[EMAIL PROTECTED]>
: :'  :    proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!

Attachment: signature.asc
Description: Digital signature

Reply via email to