Sandboxing and securing hosts?

rrinc · - Joined: 24 Feb 2006 Posts: 725 Location: Arkansas, USA

I am considering hosting a few websites and I'm wanting to keep the users out of eachother's webspace. How could I do that? The main risk I'm thinking of is users accessing eachother's stuff through server-side scripting languages. Also, I'll need to disable executable stuff somehow (EXE's, BAT, CMD, etc and keep users from using things like PHP's exec). How do I prevent that, PHP, Perl, and possibly ASP.NET will be available to them. (I'm not sure if I'll offer ASP.NET though) Also, what would you recommend for enforcing users' quotas?
_________________
-Blake | New Server :D
SaveTheInternet
Soy hispanohablante. Puedes contactarme por mensajes privados.

AbyssUnderground · - Joined: 31 Dec 2004 Posts: 3855

You will need to set a base_dir for each person and enable safemode. This should stop most of the things that people will try to do.
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk

aprelium · - Joined: 22 Mar 2002 Posts: 6800

rrinc,

The best protection against users using scripts to access files they are not allowed to see is to use the operating systems file permissions facilities. This also requires that each user has its own account with file permissions correctly set. On Abyss Web Server, you'll need a small tool to run scripts under that users permissions (we have such a tool for Windows right now - contact our technical support to receive a copy if you're interested).
_________________
Support Team
Aprelium - http://www.aprelium.com

rrinc · - Joined: 24 Feb 2006 Posts: 725 Location: Arkansas, USA

Thank you, email sent.
_________________
-Blake | New Server :D
SaveTheInternet
Soy hispanohablante. Puedes contactarme por mensajes privados.