On Thu, 11 May 2000, Karl J. Runge wrote:
> Since we have been on the topic of worms/viruses & UNIX, I thought I'd
> mention a neat research project called Janus. It basically provides
> a "sandbox" for helper applications by intercepting all the system
> calls (syscalls(2)) and restricting their effect.
Also:
FreeBSD 4.0 introduced the jail(2) system call and jail(8) management
utility. Basically, the "jail" subsystem lets you create "prisons" which are
almost full virtual machines, in which even the "root" user has limited
powers. Ideal for those pesky daemons which always seem to have one more
security hole (*cough* sendmail *cough* BIND *cough*).
http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=2
http://www.FreeBSD.org/cgi/man.cgi?query=jail&sektion=8
Just FYI. :-)
--
Ben Scott <[EMAIL PROTECTED]>
Net Technologies, Inc. <http://www.ntisys.com>
Voice: (800)905-3049 x18 Fax: (978)499-7839
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
