Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I have Ubuntu server 12.04 on VDS and I allow users to run their own Rails applications on behalf their own accounts. That means:

  1. They can use any shell they want
  2. They can upload what they want, e.g. .so libs
  3. They can call any function from any .so lib they uploaded

What can I do to separate them as much as possible and to save my server from being taken under control in such circumstances?

share|improve this question

1 Answer

up vote 1 down vote

I'd say your best bet would be to have each user on a virtualized environment where you can sandbox their activities. That is assuming your server can handle the additional load.

share|improve this answer
I agree with you. But can you direct me to certain sandbox suitable for using on VDS? I thought about Linux vServer, but AFAIK it requires dedicated server to function, doesn't it? – zuba Jun 15 '12 at 13:55
Sorry, i have no personal experience with VDS, you might want to wait for other users answers. – Terry Chia Jun 15 '12 at 14:01

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.