Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

[Enrico Weigelt <weigelt@metux.de>]

* Bill Longman <bill.longman@gmail.com> wrote:

> Basically just run VMWare/Virtualbox etc and put the services in there.

well, these solutions are way "bigger" (iow: more resource
intensive), since they run a complete operation system instance
within the virtual machine.

> No, chroots are NOT the same. They run on the same system.

well, chroots have not much to do with containers (even contains
could be said to include chroot as a building block) - they just
run certain processes with a different root directory (iow: these
processes see just see a subdirectory as it would be the whole
filesystem). that's nice for testing porposes or to isolate
different kind of isolate programs/libraries (eg. use different
libc's, ABIs or calling conventions, 32bit subsystems on an 
native 64bit host, etc, etc), but don't really add security.


cu
-- 
----------------------------------------------------------------------
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  +49 36207 519931  email: weigelt@metux.de
 mobile: +49 151 27565287  icq:   210169427         skype: nekrad666
----------------------------------------------------------------------
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
----------------------------------------------------------------------