Re: [Vserver] secure a guest against the host's root-account

From: Sebastian Harl <>
Date: Mon 24 Apr 2006 - 22:27:32 BST
Message-ID: <>

Hi there,

> Q: Is there a way to prevent that a superuser on the host system can

Well, usually one characteristic of a superuser is the right to do
_everything_. Even if you use something like SELinux or whatever, most
superusers have physical access to their machines in one way or another.

IMHO the best way to prevent a superuser from having access to sensible data
is to use some form of PGP/GnuPG (or the like) encryption. But even then the
superuser is able to read the memory of running processes...


Sebastian "tokkee" Harl
GnuPG-ID: 0x8501C7FC

Vserver mailing list

Received on Tue Apr 25 17:14:15 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 25 Apr 2006 - 17:14:25 BST by hypermail 2.1.8