One thing I would like to do as a hobby is start a classic multi-user unix 
system and giving out shell accounts to whoever wants one.  Not a money 
maker, of course, but it would be fun.

My question: does anyone have any comments on using `jail` in a public 
environment like this - that is, instead of giving away individual shell 
accounts, you would give away individual "jails" - basically a whole 
seperate machine with its own IP and own root access, etc.  ?

I am not asking about the commercial viability - it's just a hobby system.  
But in terms of limiting resources (so no one user bogs down the whole 
system) and in terms of security (nobody can turn rogue and bring down / 
compromise the system) is this a viable option ?

Or is jail best kept to environments where the users are in-house (trusted) 
?

Another way of asking this would be, was jail developed for, and best used 
for, creating a safe area for daemons like httpd, or was it developed with 
running many full-blown independent systems on a single machine in mind ?

_any_ comments appreciated.

--joesh

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to