• 1
Solve a common problem every week with a thorough and complete work through_

* You have a shared box on which untrusted users host websites, run cron jobs, and run perl scripts, perhaps even run shell scrits (i.e. a typical web hosting scenario) - how do you prevent:
* users reading each other's files (or writing..)
* users viewing each others processes
* users determining a list of customers or available websites


apache mod_rsbac :P

Re: easy

Interesting, but it's pretty much unknown, which is why an article is needed.
Also - it doesn't look like it covers the other points - perl scripts, cron jobs, etc.

Re: easy

everything is covered by rsbac.
mod_rsbac simply provide a way for apache to label it's subprocesses (=give them a role id+name) so that you can define which types this/these roles have access to.
being perl, php, cron, anything, will work.

I'm currently trying to set up a bindadm user akin to your hypothetical apacheadm_t. I'm running FC6 with the strict policy; do I understand from your post that I can only set up such a user if I use the mls policy, or is there a way for me to shoehorn it into strict? Mainly the problem I'm currently running into is that I can't seem to get sshd to transition into the bindadm_u:bindadm_r:bindadm_t:s0 context when the bindadm user logs in.

Note that I've only recently started hacking on this, and the last two weeks I've spent googling and reading docs (a lot of which are frustratingly out-of-date as they reference FC2), so I accept that it's entirely possible that I'm missing something completely obvious here. Seems like it'd be a good one-off for this blog, though - how to set up a new user context from scratch.

You do not want to login directly to bindadm_t

RBAC works with both MLS and Strict policy

I think it would be easier to setup a user with both staff_r and bindadm_r and then login as staff_t and newrole to bindadm_r.

Musica per qualcuno mente

Musica per tutti

Buy cheap cialis


Re: Buy cheap cialis

BUT YOU CAN ALSO READ ABOUT cialis and viagra at http://viagra-vs-cialis.blogspot.com/ beuriful expressions Go fuck Cialis (http://viagra-vs-cialis.blogspot.com/)

Greetings, add me please in friends. =)

I need help

a design is just in a theme I got to you from a search engine through a site
< a href= http://lesbian-cam.premium10adult.info/free-lesbian-web-cam.html >free lesbian web cam </a> polazil for you on the site of danwalsh.livejournal.com all klastno but it is necessary to go

Great Money Making Oppurtunity

Great Multi-level marketing opportunity

The cost to start uip is $200 only, then you have to get 2 others to sign up and thats it!
Watch your returns pile u. Watch the video to see how the system works. If you cannot afford $200, I am sorry but you will miss out

Great work


Great work


Com/newlz/ The cost to start up is only, then you have to get 2 others to sign up and thats it. Watch your returns pile u.

Great work


hello everyone yo yo 123abcdd

hey there awesome site!
hey hey hey
this is me and me only yo yo


Good design, who make it?

good stuff

cheap cialis (http://www.spitis.com/cheap-cialis.html)

cheap cialis generic (http://www.spitis.com/cheap-cialis-generic.html)

cheap cialis tablet (http://www.spitis.com/cheap-cialis-tablet.html)

cheap cialis tablets (http://www.spitis.com/cheap-cialis-tablets.html)

cheap cialis viagra (http://www.spitis.com/cheap-cialis-viagra.html)

cheap generic cialis (http://www.spitis.com/cheap-generic-cialis.html)

cheap viagra cialis (http://www.spitis.com/cheap-viagra-cialis.html)

chore relationship sex (http://www.spitis.com/chore-relationship-sex.html)

ciaalis (http://www.spitis.com/ciaalis.html)

ciagra (http://www.spitis.com/ciagra.html)

ciails (http://www.spitis.com/ciails.html)

is that a thong?

[url=http://public.fotki.com/megastorm/is-that-a-thong?.html]is that a thong?[/url]
[url=http://public.fotki.com/megastorm/white-shorts.html]white shorts[/url]
[url=http://public.fotki.com/megastorm/coors-light.html]coors light[/url]
[url=http://public.fotki.com/megastorm/koqui-halter.html]koqui halter[/url]
[url=http://public.fotki.com/megastorm/group-sI007.html]group sI007[/url]
[url=http://public.fotki.com/megastorm/group-sI002.html]group sI002[/url]
[url=http://public.fotki.com/megastorm/DolceandGabana.html]Dolce and Gabana[/url]
[url=http://public.fotki.com/megastorm/camera-occulta.html]camera occulta[/url]
[url=http://www.youtube.com/watch?v=D8w2i14GaNI]cheer camp[/url]
[url=http://tennis-babe.blogspot.com]tennis babe[/url]
[url=http://www.youtube.com/watch?v=4Prz3fVosJI]cheer practice[/url]
[url=http://404secrets.com/404-Secrets.pdf]404 secrets[/url]
[url=http://www.atletska-zveza.si/files/atleti/bikar_alenka_2005.pdf]alenka bikar 2005[/url]
[url=http://www.usatf.org/statistics/OlympicTrialsStats2004.pdf]Olympic Trials Stats 2004[/url]
[url=http://www.ballroomdancecamp.org/pdf/brochure2003.pdf]ballroom dance camp 2003[/url]

The best thing about The SpiderWeb Marketing System must be that it`s sooo EASY..I just follow the step by step video tutorials, and I was set up in now time.

The second best thing must be that it dosen`t cost me anything. I just bought a domain, and tried it for free 7 days....That is worth a try....

And last but not least: You really dont have to be any good on computers....This was the first time I did something like that, and I was a bit skeptic. But The SpiderWeb System guided my trough every little step.

This is a great way to earn some more money. I have a job as an auxiliary-nurse, and is working full time. I also am a single mother. My daughter is 15 years old, so it`s always great with some extra money. And I doesn`t have to go out of the hose to earn more money. The SpiderWeb System does almost all of the work for me. That is just fantastic.

You can find out more about this opportunity by visiting The SpiderWeb Marketing System, or by sending me an e-mail.


  • 1

Log in