Hello, maybe kernel-patch-ctx (together with some user space utilities included in the vserver package) can help. It gives you the possibility to limit the superuser.
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

