Meetup: http://bit.ly/24BICms
Papers: http://bit.ly/1OQu5YB & http://bit.ly/21HNDYf
Slides: http://bit.ly/1QmCSWr
Video: http://bit.ly/1oZitht
Jails: Confining the omnipotent root.
===========================
The traditional UNIX security model is simple but inexpressive. Adding fine-grained access control improves the expressiveness, but often dramatically increases both the cost of system management and implementation complexity. In environments with a more complex management model, with delegation of some management functions to parties under varying degrees of trust, the base UNIX model and most natural extensions are inappropriate at best. Where multiple mutually untrusting parties are introduced, ‘‘inappropriate’’ rapidly transitions to‘‘nightmarish’’, especially with regards to data integrity and privacy protection. The FreeBSD ‘‘Jail’’ facility provides the ability to partition the operating system environment, while maintaining the simplicity of the UNIX‘‘...
Comments