Re: Special Kernel Modification Results

[H. Peter Anvin]

Followup to:  <[e-mail]>
By author:    [e-mail]
In newsgroup: linux.dev.kernel
> 
> It is nice that in Linux a person can easily set permissions to
> prevent someone from entering a particular directory, but for the
> special projects when you want to somehow confine them to their HOME
> directory then the standard permissions are somewhat illsuited for
> the task.
> 
> There is always the problem of being able to see the binaries from
> the users directories if you were to lock them in.
> 
> In any case, I am thinking that a combination of chroot and
> hard-links might do the trick.
> 

Either that, or chroot and vfsbinds (mount --bind), which might
actually serve you better (no one-filesystem limit.)

	-hpa

-- 
<[e-mail]> at work, <[e-mail]> in private!
"Unix gives you enough rope to shoot yourself in the foot."
http://www.zytor.com/~hpa/puzzle.txt	<[e-mail]>