[gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

[Enrico Weigelt]

* Paul Hartman <paul.hartman+gentoo@×××××.com> wrote:

<snip>

Apropos cracked machines:

In recent years I often got trouble w/ cracked customer's boxes
(one eg. was abused for SIP-calling people around the world and
asking them for their debit card codes ;-o). So thought about
protection against those scenarios. The solution:

Put all remotely available services into containers and make the 
host system only accessible via special channels (eg. serial console). 
You can run automatic sanity tests and security alerts from the hosts
system, which cannot be highjacked (as long as there's no kernel
bug which allows escaping a container ;-o).

This also brings several other benefits, eg. easier backups, quick
migration to other machines, etc.


cu
-- 
----------------------------------------------------------------------
 Enrico Weigelt, metux IT service -- http://www.metux.de/

 phone:  [phone]  email: weigelt@×××××.de
 mobile: [phone]  icq:   210169427         skype: nekrad666
----------------------------------------------------------------------
 Embedded-Linux / Portierung / Opensource-QM / Verteilte Systeme
----------------------------------------------------------------------