GRSEC Possible?

[edwardam]

I am putting together a remote backup solution and I need to maintain user permissions and the like for the customers data. We are using rsync and dervish to do the backups nightly.

What I'd like to do is use grsecurity to do two things:

1) limit a customer to their data only without having to build chroot environments for each customer. chroot maintenance can be a pain and take up a few hundred MB of storage for each customer.

2) allow the customers login to be able to access alll of their data without having to become root. So they can copy files owned by root/other user ids back to their systems.

I'm pretty sure #1 is possible, but I'm not sure #2 is.

Eventually I'll probably build a pretty interface for all this and develop other customer side tools for getting the data back. But I'll looking to start small and work into that, so I'm hoping grsec will solve some of my problems now.

Thanks!