Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to host php projects and perhaps prjs on my server. Theres two main issues i have.

1) The php files scanning my filesystem. I dont want it to visit /var/www/majorapp/config.xml and read the db or admin password. Along with source of other host projects (which are also in php)

2) track or kill processes that eat up CPU or ram. If a php file or project is doing something cpu intensive i'd like to kill it. It would be great if it works on spawn process as well.

bonus: if i can prevent it from using the network such as visiting or

I am considering allowing the user run prjs as well since my site is using My server is apache2 on a linode virtual host. Debian lenny

share|improve this question

One solution would be to use something like Linux Containers (LXC) to provide isolated environments to each project. This solution lets you assign hard limits to things like memory and CPU utilization, and it lets you set network firewalls and so forth for each project. This also means each project gets its own filesystem namespace. More information here:

Similar projects include:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.