Re: Protections on inetd (and /sbin/* /usr/sbin/* in general)

[Dag-Erling Smorgrav]

Gordon Tetlow <[EMAIL PROTECTED]> writes:
> If you are using apache (who isn't?), I highly suggest you look into using
> suexec. That way bad CGI programming is offloaded to the customer and not
> to your system.

suexec has many weaknesses - amongst other problems, it does not set
resource limits; nor does it chroot as far as I recall.

DES
-- 
Dag-Erling Smorgrav - [EMAIL PROTECTED]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message