Limit access to machine

Hi all,

I am writing a web interface where users can upload code to run in root in our server. It is for a course I am giving on root programming. But I am worried about the possibility of having macros accessing file systems and basic OS structures.

Is there a way to compile or configure, or run, root in such a way that we restrict access to basic operating system features and file systems?

Best regards

Alex Suaide


There is no internal means to restrict ROOT functionality. However ROOT will not circumvent the external restrictions (i.e. if you runs the script as a local user that has restricted access those restriction will be followed).


Thanks, Alex