Re: Functionality simular to FreeBSD's jails

[Joey Hess <joey@kitenet.net>]

Colin Cashman wrote:
> VSD creates replicas of a working GNU Linux file system and uses this as a template for Virtual Servers. The replica files (not the
> entire OS) are 'hardlinked' to the original image, and share the same inode as the original file (which saves disk space). Each
> replica is assigned a unique IP address, and a user can then log into that Virtual Server transparently using Telnet or FTP.

If this is intended to be secure, using hard links strikes me as a
stunningly bad idea. A process inside the chroot need only modify the
hard linked file, and they can expose a trojan outside the chroot. Not
to mention that as has been noted, chroots can be broken out of if
you're root.

-- 
see shy jo