[arch-general] how many virtual machines
ma1l1ists at yahoo.co.uk
Wed Apr 4 08:36:42 EDT 2012
On Tue, 3 Apr 2012 18:10:12 -0400
Kaiting Chen wrote:
> Yeah run each service as an unprivileged user and you should be fine. If
> security is very critical than run something like SELinux or a similar RBAC
If you don't mind compiling a kernel, grsecurity and it's accompanying
rbac or using rsbac instead are even better than SELinux.
rsbac will cost you the most time. Grsecurity's rbac has a learning
mode but won't let you selectively apply as the author sees that as a
false sense of security.
OpenBSD is my favourite option for servers but not for nfsv4. Do you
need file locking or can you use something like sftp (ssh file
More information about the arch-general