Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Javier Fernández-Sanguino Peña
On Sat, Oct 19, 2002 at 01:29:40PM +0200, Alexander Neumann wrote: Hi Jesus, Jesus Climent wrote: * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show jailtool [...] Funny

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread jgarcian
http://packages.debian.org/cgi-bin/search_packages.pl?keywords=jailtoolsearchon=namessubword=1version=allrelease=all Jordi * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Alexander Neumann
Javier Fernández-Sanguino Peña wrote: Funny ,it's the same 'makejail' does. Does jailtool know about Debian packages? Once of the nice things about 'makejail' is that it will automatically take package dependancies as source of information on which files to put in the 'jail'. Yes,

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Indra Kusuma
On Tue, Oct 22, 2002 at 12:37:04PM +0200, Alexander Neumann wrote: # Yes, jailtool takes Debian Package Dependencies and/or CPAN .packlist # files. I didn't know about 'makejail', I think I'll have a look at it... theres also another one called jailer, but if you want to secure your system,

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Alain Tesio
On Tue, 22 Oct 2002 23:26:55 +0700 Indra Kusuma [EMAIL PROTECTED] wrote: # Yes, jailtool takes Debian Package Dependencies and/or CPAN .packlist # files. I didn't know about 'makejail', I think I'll have a look at it... theres also another one called jailer, but if you want to secure your

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Indra Kusuma
On Tue, Oct 22, 2002 at 11:10:56PM +0200, Alain Tesio wrote: # theres also another one called jailer, but if you want to secure your # system, then you have to know well about it, use strace,lsof,mknod,ldd # and mount command to create chroot jail system manually. # # These are the commands

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Javier Fernández-Sanguino Peña
On Sat, Oct 19, 2002 at 01:29:40PM +0200, Alexander Neumann wrote: Hi Jesus, Jesus Climent wrote: * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show jailtool [...] Funny

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread jgarcian
http://packages.debian.org/cgi-bin/search_packages.pl?keywords=jailtoolsearchon=namessubword=1version=allrelease=all Jordi * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Alexander Neumann
Javier Fernández-Sanguino Peña wrote: Funny ,it's the same 'makejail' does. Does jailtool know about Debian packages? Once of the nice things about 'makejail' is that it will automatically take package dependancies as source of information on which files to put in the 'jail'. Yes,

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Indra Kusuma
On Tue, Oct 22, 2002 at 12:37:04PM +0200, Alexander Neumann wrote: # Yes, jailtool takes Debian Package Dependencies and/or CPAN .packlist # files. I didn't know about 'makejail', I think I'll have a look at it... theres also another one called jailer, but if you want to secure your system,

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Alain Tesio
On Tue, 22 Oct 2002 23:26:55 +0700 Indra Kusuma [EMAIL PROTECTED] wrote: # Yes, jailtool takes Debian Package Dependencies and/or CPAN .packlist # files. I didn't know about 'makejail', I think I'll have a look at it... theres also another one called jailer, but if you want to secure your

Re: Securing Apache: vserver or chroot ?

2002-10-22 Thread Indra Kusuma
On Tue, Oct 22, 2002 at 11:10:56PM +0200, Alain Tesio wrote: # theres also another one called jailer, but if you want to secure your # system, then you have to know well about it, use strace,lsof,mknod,ldd # and mount command to create chroot jail system manually. # # These are the commands

[OT: humour] Re: Securing Apache: vserver or chroot ?

2002-10-20 Thread Peter Cordes
On Sat, Oct 19, 2002 at 01:29:40PM +0200, Alexander Neumann wrote: Hi Jesus, Jesus Climent wrote: * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show jailtool [...] Description:

Re: Securing Apache: vserver or chroot ?

2002-10-19 Thread Alexander Neumann
Hi Jesus, Jesus Climent wrote: * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show jailtool [...] Description: Tool to build chroot-jails for daemons. Jailtool provides an easy way to build

Re: Securing Apache: vserver or chroot ?

2002-10-19 Thread Alexander Neumann
Hi Jesus, Jesus Climent wrote: * Chroot The linux system call to jail a subtree. Has to be created and maintained manually. You can try 'jailtool', if you like: $ apt-cache show jailtool [...] Description: Tool to build chroot-jails for daemons. Jailtool provides an easy way to build

Securing Apache: vserver or chroot ?

2002-10-18 Thread Jesus Climent
Hi. I have been thinking about puting apache inside a place it cannot harm anything else on the system. We are serving web pages for several projects and we cannot control what every of them do (PHPNuke, PostNuke and friends have their big share of vulnerabilities). I have been reading about