> Q: Is there a way to prevent that a superuser on the host system can
Well, usually one characteristic of a superuser is the right to do
_everything_. Even if you use something like SELinux or whatever, most
superusers have physical access to their machines in one way or another.
IMHO the best way to prevent a superuser from having access to sensible data
is to use some form of PGP/GnuPG (or the like) encryption. But even then the
superuser is able to read the memory of running processes...
-- Sebastian "tokkee" Harl GnuPG-ID: 0x8501C7FC http://tokkee.org/
Vserver mailing list