Re: [SC-L] virtual server - security

2004-04-01 Thread James Walden
Along the same lines as the suggestion to use VMware, have you thought about User Mode Linux? User Mode Linux lets you run virtual Linux machines on your existing Linux system. If you have enough memory, you could give each of your user groups their own virtual Linux machine with its own file

RE: [SC-L] virtual server - security

2004-04-01 Thread Alun Jones
[EMAIL PROTECTED] <> wrote on Wednesday, March 31, 2004 11:35 AM: > Sniffing on the LAN isn't my main concern, it's the > concentration points > inbetween A and B. Good idea on the SSL wrapper on Telnet, > although the > original poster said they doesn't want to offer shell access. I'm > not qui

RE: [SC-L] virtual server - security

2004-03-31 Thread Dave Paris
a few notes.. > -Original Message- > From: jnf [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 31, 2004 11:23 AM > To: Dave Paris > Cc: Serban Gh. Ghita; [EMAIL PROTECTED] > Subject: RE: [SC-L] virtual server - security [...] > > What's the point of t

Re: [SC-L] virtual server - security

2004-03-31 Thread Frank Peters
Tuesday 30 March 2004 11.05, Serban Gh. Ghita: > What are the options here. Any paper or book written about > this? su-wrapped MODPHP: http://www.suphp.org/Home.html (CGI is done via suexec) Even UML might be a Solution for you, if you have enough ressources. hth

RE: [SC-L] virtual server - security

2004-03-31 Thread Jeremy Epstein
age- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Behalf Of Scott Nemec > Sent: Tuesday, March 30, 2004 6:46 PM > To: [EMAIL PROTECTED] > Subject: Re: [SC-L] virtual server - security > > > Have you looked at VMware? ( http://www.vmware.com ) > >

RE: [SC-L] virtual server - security

2004-03-31 Thread jnf
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > comments interspersed below... likewise. > What's the point of the exercise if you're passing plaintext passwords > across on port 21? At the very least, mandate SCP/SFTP on port 22. yes because having a remote exploit every month or two for ro

RE: [SC-L] virtual server - security

2004-03-31 Thread Dave Paris
comments interspersed below... Kind Regards, -dsp > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Behalf Of Serban Gh. Ghita > Sent: Tuesday, March 30, 2004 4:05 AM > To: [EMAIL PROTECTED] > Subject: [SC-L] virtual server - security > > > Hello > > I am banging

Re: [SC-L] virtual server - security

2004-03-31 Thread Louis Solomon [SteelBytes]
I am banging my head on the table every day, because i cannot find an elegant and safe solution to secure a virtual shared environment (server). Take the following facts: -you have a virtual server (unix) and you have to take care of a lot of clients. ... maybe something like plesk may be useful ht

Re: [SC-L] virtual server - security

2004-03-31 Thread Fernando Schapachnik
Working for an ISP in a previous life we used FreeBSD jails. There are kind-of-similar solutions for linux also (there's actually people in the list who sell them even). Good luck. En un mensaje anterior, Serban Gh. Ghita escribió: > Hello > > I am banging my head on the table every day, because

Re: [SC-L] virtual server - security

2004-03-30 Thread Scott Nemec
Have you looked at VMware? ( http://www.vmware.com ) It let's you provide an environment at the hardware-like level inside a real box. This way, if the the script kiddie get's control of your virtual environment, you can just reset back to a pre-saved state. Meanwhile, the real box is protected