Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Nov 2001 00:16:50 -0700
From:      "Joesh Juphland" <part_lion@hotmail.com>
To:        hackers@freebsd.org
Subject:   more on jail - suitable for multi user system ?
Message-ID:  <F120iPXkmCJiLyNfHgI000142c0@hotmail.com>

next in thread | raw e-mail | index | archive | help

One thing I would like to do as a hobby is start a classic multi-user unix 
system and giving out shell accounts to whoever wants one.  Not a money 
maker, of course, but it would be fun.

My question: does anyone have any comments on using `jail` in a public 
environment like this - that is, instead of giving away individual shell 
accounts, you would give away individual "jails" - basically a whole 
seperate machine with its own IP and own root access, etc.  ?

I am not asking about the commercial viability - it's just a hobby system.  
But in terms of limiting resources (so no one user bogs down the whole 
system) and in terms of security (nobody can turn rogue and bring down / 
compromise the system) is this a viable option ?

Or is jail best kept to environments where the users are in-house (trusted) 
?

Another way of asking this would be, was jail developed for, and best used 
for, creating a safe area for daemons like httpd, or was it developed with 
running many full-blown independent systems on a single machine in mind ?

_any_ comments appreciated.

--joesh

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F120iPXkmCJiLyNfHgI000142c0>