Problem

[taggy]

iam currently giving acces to users to upload C files to my server and i also execute them using a codechecker. SInce all this is done by apache !

People are trying to bring down the server using system command ! they are also opening ports thru the C program and reading my files thru the Port.

How can i prevent them from openeing any ports thru the C program ad how do i restrict ppl frm accessing rather apache frm accessing systemc alls like fork and kill .

thnx

[Nerderello]

if you have Fedora 3 or 4, make sure that you have the targetted SELinux turned on. This will help a bit. Then look at putting a firewall , such as Firestarter (http://www.fs-security.com/) which allows you to set in both directions what can be done.

Nerderello