chrooting bind9

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I'm setting bind9 in a chroot jail. There are two chances to do this: 1) using parameter --chroot of 'start-stop-daemon' 2) using parameter -t of bind In both ways I have to use -u parameter of bind to change user, otherwise it can't get

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Martynas Domarkas
Hi, I'm currently trying to use makejail... it does not work very good. Simple way is copy /bin/bash with libraries (try ldd /bin/bash to find out which libs you need), so you can do chroot /your/chroot/dir. After do dpkg -L apache and copy contents of apache package to chroot, also repeat it with

How to get the current security updates on CD?

2003-01-04 Thread kynn
Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to http://www.debian.org/security, but I couldn't find anything like CD

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Javier Fernández-Sanguino Peña
On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: Hi, I'm currently trying to use makejail... it does not work very good. Could you elaborate more on this? I would like to know which issues have you come up with. Also, you might want to take a loot at the

Re: How to get the current security updates on CD?

2003-01-04 Thread Mike Renfro
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to

Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I have to host our school website. This site uses parts written in PHP4, and some CGIs. I also want to setup tomcat for a future possible use of JSP an servlets. I think it would be wise to put all this stuff in a chroot jail, but I wonder if

chrooting bind9

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I'm setting bind9 in a chroot jail. There are two chances to do this: 1) using parameter --chroot of 'start-stop-daemon' 2) using parameter -t of bind In both ways I have to use -u parameter of bind to change user, otherwise it can't get

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Martynas Domarkas
Hi, I'm currently trying to use makejail... it does not work very good. Simple way is copy /bin/bash with libraries (try ldd /bin/bash to find out which libs you need), so you can do chroot /your/chroot/dir. After do dpkg -L apache and copy contents of apache package to chroot, also repeat it with

How to get the current security updates on CD?

2003-01-04 Thread kynn
Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to http://www.debian.org/security, but I couldn't find anything like CD

Re: How to get the current security updates on CD?

2003-01-04 Thread SteX
In a stormy day a lighting flash occurred: it carried the message from [EMAIL PROTECTED]: § How can I get the security updates in CD form? § I went to http://www.debian.org/security, but I couldn't find anything § like CD images. You better add the following lines in /etc/apt/sources.list deb

Re: How to get the current security updates on CD?

2003-01-04 Thread Raymond Wood
On Sun, Jan 05, 2003 at 12:26:12AM +0100, SteX imagined: In a stormy day a lighting flash occurred: it carried the message from [EMAIL PROTECTED]: § How can I get the security updates in CD form? § I went to http://www.debian.org/security, but I couldn't § find anything § like CD images.

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Javier Fernández-Sanguino Peña
On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: Hi, I'm currently trying to use makejail... it does not work very good. Could you elaborate more on this? I would like to know which issues have you come up with. Also, you might want to take a loot at the

Re: chrooting bind9

2003-01-04 Thread Mark Ferlatte
begin Stefano Salvi quote on Fri, Jan 03, 2003 at 06:19:53PM +0100: There are two chances to do this: 1) using parameter --chroot of 'start-stop-daemon' 2) using parameter -t of bind In both ways I have to use -u parameter of bind to change user, otherwise it can't get privileged resources

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Phillip Hofmeister
A word of caution to chrooters, make sure when a library gets updated for security you copy the updated library into the jail and then restart all jailed applications... -- Phil PGP/GPG Key: http://www.zionlth.org/~plhofmei/ wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import --

Re: How to get the current security updates on CD?

2003-01-04 Thread Rick Moen
Quoting Raymond Wood ([EMAIL PROTECTED]): Interesting -- I wasn't aware of the security updates to sarge/testing. If I am correct in assuming that the Security Team still don't *officially* support Testing/Sarge, then I would be interested in knowing who produces/maintains these security

Someone at works likes you. mckhw

2003-01-04 Thread mcrAlina
We have been hired to contact you because someone you know is interested in you. Please follow the link below to find out who. http://www.sliaba.com/5/ No more email here http://www.sliaba.com/nomore.php lmbitexuvxcyawuni

Re: How to get the current security updates on CD?

2003-01-04 Thread Mike Renfro
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Alain Tesio
On Fri, 03 Jan 2003 18:19:43 +0100 Stefano Salvi [EMAIL PROTECTED] wrote: Makejail from testing has a script about apache, but does it support Tomcat and PHP4? And how about CGIs? It supports php and CGIs, I've tested it with a search engine with php/mysql, I'm about to use it for phpnuke.

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread George Georgalis
On Sun, Jan 05, 2003 at 01:16:31AM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: Hi, I'm currently trying to use makejail... it does not work very good. Could you elaborate more on this? I would like to know which issues

Re: How to get the current security updates on CD?

2003-01-04 Thread Matt Zimmerman
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to