Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

[Jarry <mr.jarry@gmail.com>]

On 13. 8. 2010 21:05, Enrico Weigelt wrote:
> * Bill Longman<bill.longman@gmail.com>  wrote:
>
>> Basically just run VMWare/Virtualbox etc and put the services in there.
>
> well, these solutions are way "bigger" (iow: more resource
> intensive), since they run a complete operation system instance
> within the virtual machine.

That is why I picked up Linux-VServer (actually, first I tried
OpenVZ but could not make it run). It is a kind of compromise,
where all guests share the same kernel. This brings certain
security implications, but on the other side, I can run dozens
of guest on a moderate machine, with 4-cores and 8GB memory
(i.e. a guest running bind takes just about 20MB of memory)...

The only service running on my "host" (main system) is sshd,
which I secured as much as I could. Everything else (web, mail,
dns, ftp, syslog, X, and plenty of users' services) runs on its
own guest-system, chrooted in addition (where it was possible).

Jarry

-- 
_______________________________________________________________
This mailbox accepts e-mails only from selected mailing-lists!
Everything else is considered to be spam and therefore deleted.