Kernel patching is wonderful :)

A UML is "User-Mode Linux", basically starting up a new kernel as a userland process, and you get a whole miniture system inside the new process. Of course, you can do whatever you want to this kernel you're starting up, including using a filesystem that is readonly or patching the kernel to remove read-write support, or even simply controlling file permissions on the outside of the UML (make sure the user the UML process is running as can't write to the image file).

--MonMotha

Robert Green wrote:
--- MonMotha <[EMAIL PROTECTED]> wrote:

I've used UML before to isolate services.  Ever tried breaking out
of a chroot jail? This is even better. Ever tried breaking a system where the only thing available is a readonly root filesystem with a single daemon and a few required utils? Gotta love UML :)

--MonMotha



Pardom my ignorance, but what's "UML" ? And how do you get a readonly
root file system? CD-ROM, or is it just the file permissions?
I'm planning on setting up a web server and a MUD server and it might
be handy to know how to make it tamper proof, as it were....

Thanks,

Rob


__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com
_______________________________________________
LUAU mailing list
[EMAIL PROTECTED]
http://videl.ics.hawaii.edu/mailman/listinfo/luau




Reply via email to