Some jail themselves, or should

• DNS/bind

• Maybe apache someday

• NTP should, and needs least-privilege time setting permissions. Write permission on /dev/time?

• PAM service?

Previous slide

Next slide

Back to first slide

View graphic version