Written by mitya the 16 Oct 08 at 03:06.
Category: Server.
Related project:
Nothing/Others.
Status: New
Rationale
Hi all.
I think that all major services — Apache, Postfix, Exim, OpenLDAP, ntp, jabber server, SQL servers etc. — must be run in chrooted environments right out of the box.
Mail and web servers may be run in separate OpenVZ containers for better security.
Chroot'ed daemon is more convenient to work with, but it *does not improve security* unless it drops privs just after starting - most daemons can't do that obviously, because they need root to work correctly.
http://kerneltrap.org/Linux/Abusing_chroot
Looks similar, but I talk about network servers (mail, web, ntp) only.
The sandbox is suitable for complex projects like OOO, Konqueror, JVMs — programs that can execute potentially dangerous pieces of code (macroses, Javascript and so on).
What would really help (wrt security) is adding more apparmor configurations to the distro. That system is already implemented and doesn't need any changes to the packages layout.
andruk(Idea reviewer)
wrote on the 16 Oct 08 at 19:35