File System Security
All files within ZEUSHOME are configured during installation, and subsequent alterations are made by the Virtual Traffic Manager Admin UI. All files within ZEUSHOME are therefore owned by the superuser. Certain files have world-readable permissions flags, in order to allow the zeus.zxtm processes running with unprivileged permissions to read the Virtual Traffic Manager configuration files.
If required, the Virtual Traffic Manager can be run within a “chroot” jail, effectively preventing all access to the file system other than ZEUSHOME itself. You must provide the required system libraries, some device entries in /dev and some other system-specific configuration information. For further details, see your system documentation.
Syslog logging is based on UNIX sockets and can still write files outside ZEUSHOME.
