Re: Security, audits and pserver

[Paul Sander]

>--- Forwarded mail from address@hidden

>--- Paul Sander <address@hidden> wrote:
>> A chroot environment is only good at containing
>> what's inside it.  It
>> does not prevent access to the chroot environment
>> from outside.

>I see.  I guess it's obvious that the repository would
>have to be within the chroot'ed environment meaning
>that such an environment wouldn't help in preventing
>users from directly accessing the archive files.  Is
>this right?

This is correct, provided the users (or other services) aren't
confined to their own (non-overlapping) chroot environments.

>--- End of forwarded message from address@hidden