Re: High security

[Nick Gearls]

Just a little adding: by adding "LoadFile libgcc_s.so.1" in httpd.conf, 
I don't have any more file in the chroot (except "htdocs" if not in pure 
proxy mode).

This feature is really great !
Any reason to not include it ?

Regards,

Nick


Nick Gearls wrote:
I'm running the patch for one week on a production server, and it works 
perfectly (http://svn.apache.org/viewvc?view=rev&revision=611483).
When using Apache as a reverse proxy, the chroot environment is totally 
empty (except libgcc_s.so.1).

Could we include this in next build ?
As it is very limited (basically 3 basic function calls plus the 
logging), it is trivial to review.

+1

Regards,

Nick


[... discussion about chroot effectiveness and letting the final choice 
to the user to use it or not ...]