[ILUG] Virtualisation, what the point?

[Colm MacCarthaigh]

On Wed, Jun 07, 2006 at 02:28:50PM +0100, kevin lyda wrote:
> > As a matter of interest, is it possible - without virtualisation -
> > to restrict access through apache/httpd to a given partition?
> 
> man chroot.

A chroot gives you absolutely no such protection. There is nothing to
prevent the root user within a chroot accessing a disk-device. 

It's running httpd as a non-root user that gives you any protection in
this regard.

-- 
Colm MacCárthaigh                        Public Key: colm+pgp at stdlib.net