On Tue, Apr 01, 2003 at 03:09:30PM +0100, Alan Cox wrote: > On Tue, 2003-04-01 at 14:58, Matt Zimmerman wrote: > > Why would you want to run Hercules in a chroot environment with this > > type of turnkey CD? > > Its great for firewall boxes, although not normally needed. I run a mail > server on a hercules emulated S/390 running as a nobody user chrooted on a > real box. Somehow it feels a bit safer that way
That's logical for a network service, but we're talking about something which basically amounts to a software demo. And since you're already giving the software on the CD complete control over the system, a chroot environment within that doesn't give the user any protection. -- - mdz
