|
VXE - Virtual eXecuting Environment
Main problem with UNIX security is that superuser can do with system anything he wants. There are programs (daemons) which work with superuser privilegies, for example popd, sendmail, and accessible from network
(Internet/Intranet). There could be bugs in any program, so intruder connects to such programs via network, exploit existing bugs in it and get a control over all host. VXE (Virtual eXecuting Environment) protects UNIX servers from such intruders, hacker attacks from network and so on. It protects software subsystems, such as: SMTP, POP,
HTTP and any other subsystem, already installed on the server. There is no need to change configuration of existing software - just PROTECT it.So, VXE solve the following problem: protects host and particular
subsystems, which work as superuser and can have bugs. This is the situation we have in real life.
VXE can be used for various tasks, for example:
- daemon protection, as mentioned above;
- provide user access to command line (shell, telnet) with restrictions (VXE
describes - what tools and files are available for each user, and these
restrictions can't be broken by any tricks);
- with VXE it is possible to allow user CGI hosting; VXE limits resources
available to programs supplied by user, so it is painless to have user
uploaded CGI scripts;
- etc.
VXE is FREE for non-commercial use. |
