I have Ubuntu server 12.04 on VDS and I allow users to run their own Rails applications on behalf their own accounts. That means:
- They can use any shell they want
- They can upload what they want, e.g. .so libs
- They can call any function from any .so lib they uploaded
What can I do to separate them as much as possible and to save my server from being taken under control in such circumstances?