Re: Special Kernel Modification Results

From: H. Peter Anvin (hpa@zytor.com)
Date: Mon Nov 05 2001 - 03:01:47 EST


Followup to: <1004926188.3be5f4ec7e622@mail.outstep.com>
By author: lonnie@outstep.com
In newsgroup: linux.dev.kernel
>
> It is nice that in Linux a person can easily set permissions to
> prevent someone from entering a particular directory, but for the
> special projects when you want to somehow confine them to their HOME
> directory then the standard permissions are somewhat illsuited for
> the task.
>
> There is always the problem of being able to see the binaries from
> the users directories if you were to lock them in.
>
> In any case, I am thinking that a combination of chroot and
> hard-links might do the trick.
>

Either that, or chroot and vfsbinds (mount --bind), which might
actually serve you better (no one-filesystem limit.)

        -hpa

-- 
<hpa@transmeta.com> at work, <hpa@zytor.com> in private!
"Unix gives you enough rope to shoot yourself in the foot."
http://www.zytor.com/~hpa/puzzle.txt	<amsp@zytor.com>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Wed Nov 07 2001 - 21:00:25 EST