[cap-talk] Any hope in RSA 2008?

[Raoul Duke]

>  Either they are more like compartments with walls *made* of swiss
>  cheese, or they prove to be quite tedious to setup, and resource
>  consuming.

I see what you mean; I was (unclearly) coming not from the "chroot
jails ROCK, d00d, how could we ever need anything else?!" perspective
as from the "people know about chroot jails, and they are getting ever
more popular for security reasons, so i guess people aren't utterly
dismissive of POLA, so how can that be used to get people over into
more +real+ POLA?" your points about the administrative costs sound to
me like they could be good arguments to draw people towards more
+real+ POLA perhaps.

sincerely.