On Wed, Oct 26, 2011 at 07:38:02AM -0700, Rich Shepard wrote: > I want to bring my Web site in-house and add proftp for data exchange with > clients. I have 24G available on the /opt partition and want to set up a > chroot jail there for MySQL, a second copy of httpd (if necessary), and > proftp.
A chroot jail is a good idea for proftp or vsftp. Consider allowing only FTPS for authenticated connections, and only anonymous mode for regular FTP. Plain FTP leaks logins and passwords. Jailing MySQL and/or Apache would be a bigger challenge, since they depend on a lot of libraries. Folks who want to go to that much trouble usually use something heavier, like LXC (Linux Containers) or full virtualization. The quality of documentation and difficulty depend on your distro--I forgot what you usually run. Short term, you might want to set up CMSMS, Apache and MySQL on a separate box or VM, with a new OS install, just for practice and to get up and running. _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
