Re: [vserver] vserver security

From: Oliver Welter <mail_at_oliwel.de>
Date: Thu 15 May 2008 - 23:43:48 BST
Message-ID: <482CBCA4.1020402@oliwel.de>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Giovanni Di Stasi schrieb:
| Il Friday 16 May 2008 00:28:44 Ed W ha scritto:
|> Giovanni Di Stasi wrote:
|>> So,
|>> would you implement a server to give a few services (dns, webserver,
|>> dhcp, etc.) putting each of these services in a different vserver, just
|>> to have a system more secure?
|> Yes - this is normal practice.
|>
|> Also it's a piece of cake to copy the vserver to backup before testing
|> some new config
|>
|>> What do you think about having a ssh server in each vserver and not in
|>> the main context? Is this setup more secure?
|> This is normal, however watch out for the ssh in the host nabbing all
|> the IPs - set it to run only on the host ips in the config
|>
|
| Mmmm... but I don't want to run sshd in the host context at all... had
you
| understood that?
|
Then I hope you have another way to get connected to that box, otherwise
you loose the whole ability to manage the host system...

If you do so, you can go your way with ssh default configs, as the sshd
inside the guest only "sees" his IPs.

Oliver

- --
Protect your environment - close windows and adopt a penguin!
PGP-Key: 3B2C 8095 A7DF 8BB5 2CFF 8168 CAB7 B0DD 3985 1721
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFILLykyrew3TmFFyERAodcAJ9KkV2P47XCkTqm3cUYFVbKb8uQwACbB9OI
sIcDO36L3XhUCuLjXAxKK3I=
=KcXS
-----END PGP SIGNATURE-----
Received on Thu May 15 23:44:04 2008

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 15 May 2008 - 23:44:06 BST by hypermail 2.1.8