Re: Jails and multicore boxes

2007-11-16 Thread Norberto Meijome
On Wed, 14 Nov 2007 19:20:06 +0100 Erik Cederstrand [EMAIL PROTECTED] wrote: You'll have to answer that yourself. How valuable is your data? What are you trying to protect? If you're worrying about getting cracked and used as a spam bot, jails are no more secure than a non-jail system.

Re: Jails and multicore boxes

2007-11-16 Thread Federico Lorenzi
On Nov 16, 2007 6:57 AM, Norberto Meijome [EMAIL PROTECTED] wrote: On Wed, 14 Nov 2007 19:20:06 +0100 Erik Cederstrand [EMAIL PROTECTED] wrote: You'll have to answer that yourself. How valuable is your data? What are you trying to protect? If you're worrying about getting cracked and used

jails and security [was: Jails and multicore boxes]

2007-11-16 Thread Randy Schultz
On Fri, 16 Nov 2007, Federico Lorenzi spaketh thusly: -} you trying to protect? If you're worrying about getting cracked and used -} as a spam bot, jails are no more secure than a non-jail system. -} -} Maybe some qualification is needed here. -} -} If your mail jail gets broken into, then it

Jails and multicore boxes

2007-11-14 Thread Matt Fioravante
I've heard that things like freebsd jails or solaris zones can still be insecure on multicore boxes because a race condition can occur. I don't know more details about it other than that. Is this true now on freebsd? Also, I have a home server which I'm considering running apache, bind, dhcp,

Re: Jails and multicore boxes

2007-11-14 Thread Erik Cederstrand
Matt Fioravante wrote: I've heard that things like freebsd jails or solaris zones can still be insecure on multicore boxes because a race condition can occur. I don't know more details about it other than that. Is this true now on freebsd? There's always the possibility that a bug exists which