[Vserver] Re: A possible new idea

From: Matvey Gladkikh <matvey_at_journal.kmv.ru>
Date: Thu 11 May 2006 - 00:17:46 BST
Message-ID: <20060510231746.GA3496@gw.int.bully.org.ru>

On 10/05/06 14:46 -0400, Fareha Shafique wrote:
> After asking various questions about unification, I don't think vhashify
> quite supports what I have in mind. I wanted to get some opinions/ideas
> from the users of this mailing list.
>
> I am thinking if vservers can somehow be used to provide MAC (Mandatory
> Access Control) through containers. For example, a vserver shares the
> same filesystem as the host server, with read and write access to the
> host files being defined through a set of MAC policies. In this way,
> different policies can be defined for different vservers. Also, writes
> can be contained within a vserver (so that if a file is written to, a
> copy is made in the vserver's space) and integrated with the host only
> through explicit 'commits' to allow, for example, new configurations to
> be tested in an environment exactly the same as the host server and then
> transferred to the host using a commit.
>
> Any comments please?

Rsync backup copy, do update, if smth fails - restore from backup.
BTW if smth fails - you are likely updating developement version.

Or I mistaken?

-- 
Matvey Gladkikh
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu May 11 00:13:51 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 11 May 2006 - 00:13:56 BST by hypermail 2.1.8