Comments on: Granting just enough power, but no more http://rcoder.net/content/granting-just-enough-power-but-no-more Code, food, pinball, beer, and bikes. It's hard living in a place this awesome. Sat, 23 Jan 2010 11:37:40 -0800 http://wordpress.org/?v=2.8.4 hourly 1 By: lennon http://rcoder.net/content/granting-just-enough-power-but-no-more/comment-page-1#comment-288 lennon Thu, 13 Nov 2008 02:43:50 +0000 http://rcoder.net/?p=308#comment-288 @Ollie: chroot-ed sessions are definitely more complicated to set up, but they also protect against a whole class of attack this tool doesn't. (The Vim option in the example config shows this well -- you can read and execute arbitrary files from within the editor.) However, the two can also be complementary. You could run menush inside a chroot as a user-friendly front-end launcher, for example. @Ollie: chroot-ed sessions are definitely more complicated to set up, but they also protect against a whole class of attack this tool doesn’t. (The Vim option in the example config shows this well — you can read and execute arbitrary files from within the editor.)

However, the two can also be complementary. You could run menush inside a chroot as a user-friendly front-end launcher, for example.

]]> By: Ollie Saunders http://rcoder.net/content/granting-just-enough-power-but-no-more/comment-page-1#comment-287 Ollie Saunders Thu, 13 Nov 2008 02:15:18 +0000 http://rcoder.net/?p=308#comment-287 Hey this is great to know! I've done a bit of server configuration work before and I was always sold on chroot jails in principle but I could never justify the effort and complexity involved. I will definitely keep this in mind for the future. Hey this is great to know! I’ve done a bit of server configuration work before and I was always sold on chroot jails in principle but I could never justify the effort and complexity involved. I will definitely keep this in mind for the future.

]]>