Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Ubuntu server 12.04 on VDS and I allow users to run their own Rails applications on behalf their own accounts. That means:

  1. They can use any shell they want
  2. They can upload what they want, e.g. .so libs
  3. They can call any function from any .so lib they uploaded

What can I do to separate them as much as possible and to save my server from being taken under control in such circumstances?

share|improve this question

I'd say your best bet would be to have each user on a virtualized environment where you can sandbox their activities. That is assuming your server can handle the additional load.

share|improve this answer
I agree with you. But can you direct me to certain sandbox suitable for using on VDS? I thought about Linux vServer, but AFAIK it requires dedicated server to function, doesn't it? – zuba Jun 15 '12 at 13:55
Sorry, i have no personal experience with VDS, you might want to wait for other users answers. – Terry Chia Jun 15 '12 at 14:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.