[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chroot with virtual IP-Address



Hello Martin,

Am 2005-04-01 13:55:35, schrieb martin f krafft:

> As they all use the same IP stack, no way. You will need UML, xen,
> qemu for this to work.

Read it already...

> That said, you can still start e.g. SSH servers in each chroot and
> bind them to specific sockets, but the master machine will need to
> have all the IPs added (ip addr add 1.2.3.4 dev eth0) to its
> interface, and users in chroots can bind to the IPs of other
> chroots. I would assume that a MAC system (e.g. RSBAC, SELinux) can
> be used to prevent this.

I have already assingned 12 virtual IPs to the eth0 but the thing
with the sshd was new for me.

Because I have no other $USER, there is no big security problem.

Thanks
Michelle

-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/ 
Michelle Konzack   Apt. 917                  ICQ #328449886
                   50, rue de Soultz         MSM LinuxMichi
0033/3/88452356    67100 Strasbourg/France   IRC #Debian (irc.icq.com)

Attachment: signature.pgp
Description: Digital signature


Reply to: