Em Mon, Jan 14, 2002 at 10:20:31AM -0800, Seth Arnold escreveu: > sshd"; I think he was after something more like, "to have shell users on > your system that you don't trust, you need to enable quotas, use PAM's > login limits, turn on process accounting, look into security-enhancing > patches to help harden the system, make sure you understand why every > setuid and setgid executable on the machine has those bits, send system > logs off to another host, and for the love of god, keep up on updates."
Has anybody recently tried out user-mode linux? Perhaps it could be used as well, give a completely independent kernel for each user, with root and everything :)
