Re: LIDS vers. chroot

2003-02-05 Thread John Morton
On Wed, 05 Feb 2003 20:14, Benjamin Schuele wrote: > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. In my opinion, a good customized LIDS is more reliable and > usable then chroot because of this reasons: > > Time to set up > I tooks a lot of time to get one

Re: LIDS vers. chroot

2003-02-05 Thread John Morton
On Wed, 05 Feb 2003 20:14, Benjamin Schuele wrote: > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. In my opinion, a good customized LIDS is more reliable and > usable then chroot because of this reasons: > > Time to set up > I tooks a lot of time to get one

Re: LIDS vers. chroot

2003-02-05 Thread Ralf Dreibrodt
Hi, > Benjamin Schuele wrote: > > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. i prefer the solution to use chroot _with_ LIDS. Make everything you would do without chroot and chroot the process (e.g. bind, apache, etc.). Remove the CAP_SYS_CHROOT from

Re: LIDS vers. chroot

2003-02-05 Thread Ralf Dreibrodt
Hi, > Benjamin Schuele wrote: > > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. i prefer the solution to use chroot _with_ LIDS. Make everything you would do without chroot and chroot the process (e.g. bind, apache, etc.). Remove the CAP_SYS_CHROOT from

LIDS vers. chroot

2003-02-05 Thread Benjamin Schuele
I would like to initiate a discussion about LIDS and chroot to setup a secure server. In my opinion, a good customized LIDS is more reliable and usable then chroot because of this reasons:   Time to set up I tooks a lot of time to get one programm running in a chroot environment, and unsualy

LIDS vers. chroot

2003-02-04 Thread Benjamin Schuele
I would like to initiate a discussion about LIDS and chroot to setup a secure server. In my opinion, a good customized LIDS is more reliable and usable then chroot because of this reasons:   Time to set up I tooks a lot of time to get one programm running in a chroot environment, and unsualy