Re: mod_perl in chroot environment

2000-12-12 Thread Matthew Byng-Maddick
On Tue, 12 Dec 2000, Gunther Birznieks wrote: > At 09:58 AM 12/11/00 +, Matthew Byng-Maddick wrote: > >On Sun, 10 Dec 2000, Gunther Birznieks wrote: > > > For example, perhaps the mod_perl server and the HTML/images server should > > > be separately chrooted from each other? That way, someone

Re: mod_perl in chroot environment

2000-12-11 Thread Gunther Birznieks
I've snipped some stuff out of both sides. At 09:58 AM 12/11/00 +, Matthew Byng-Maddick wrote: >On Sun, 10 Dec 2000, Gunther Birznieks wrote: > > At 03:33 PM 12/10/00 +0100, Stas Bekman wrote: > > > For example, perhaps the mod_perl server and the HTML/images server should > > be separately c

Re: mod_perl in chroot environment

2000-12-11 Thread Gunther Birznieks
At 10:51 AM 12/11/00 -0500, Vivek Khera wrote: > > "SB" == Stas Bekman <[EMAIL PROTECTED]> writes: > >SB> Do you think I should include the scenario of making Apache run in >SB> chroot enviroment in the guide? > >That require quite a bit of stuff be crammed into the chroot jail. >You'll need a

Re: mod_perl in chroot environment

2000-12-11 Thread Matthew Byng-Maddick
On Sun, 10 Dec 2000, Gunther Birznieks wrote: > At 03:33 PM 12/10/00 +0100, Stas Bekman wrote: > >Do you think I should include the scenario of making Apache run in chroot > >enviroment in the guide? > I think chroot Apache is important especially for dynamic services. Definitely. > For example,

Re: mod_perl in chroot environment

2000-12-11 Thread Stas Bekman
> > "SB" == Stas Bekman <[EMAIL PROTECTED]> writes: > > SB> Do you think I should include the scenario of making Apache run in > SB> chroot enviroment in the guide? > > That require quite a bit of stuff be crammed into the chroot jail. > You'll need an entire perl install there, wouldn't you

Re: mod_perl in chroot environment

2000-12-11 Thread Vivek Khera
> "SB" == Stas Bekman <[EMAIL PROTECTED]> writes: SB> Do you think I should include the scenario of making Apache run in SB> chroot enviroment in the guide? That require quite a bit of stuff be crammed into the chroot jail. You'll need an entire perl install there, wouldn't you? It might ma

Re: mod_perl in chroot environment

2000-12-10 Thread Stas Bekman
> The key to successful chroot'ing, I've found, is running strace or trace > (depending on your platform) and looking at what files your httpd is > looking for, importing them into the chroot environment and doing that > iteratively until you're httpd is running and answering requests fully w/o >

Re: mod_perl in chroot environment

2000-12-10 Thread Ian Kallen
Tomorrow, Gunther Birznieks <[EMAIL PROTECTED]> frothed and gesticulated...: > > > >http://www.securityfocus.com/focus/sun/articles/apache-inst.html Yup, that's good. > http://penguin.epfl.ch/chroot.html Yup, that's good too. The key to successful chroot'ing, I've found, is running strace or t

Re: mod_perl in chroot environment

2000-12-10 Thread Gunther Birznieks
At 05:21 PM 12/10/00 +0100, Stas Bekman wrote: > > At 03:33 PM 12/10/00 +0100, Stas Bekman wrote: > > >Do you think I should include the scenario of making Apache run in chroot > > >enviroment in the guide? > > > > I think chroot Apache is important especially for dynamic services. > > > > >Check

Re: mod_perl in chroot environment

2000-12-10 Thread Stas Bekman
> At 03:33 PM 12/10/00 +0100, Stas Bekman wrote: > >Do you think I should include the scenario of making Apache run in chroot > >enviroment in the guide? > > I think chroot Apache is important especially for dynamic services. > > >Check out the last section of this article: > >Installing and Sec

Re: mod_perl in chroot environment

2000-12-10 Thread Gunther Birznieks
At 03:33 PM 12/10/00 +0100, Stas Bekman wrote: >Do you think I should include the scenario of making Apache run in chroot >enviroment in the guide? I think chroot Apache is important especially for dynamic services. >Check out the last section of this article: >Installing and Securing the Apache

mod_perl in chroot environment

2000-12-10 Thread Stas Bekman
Do you think I should include the scenario of making Apache run in chroot enviroment in the guide? Check out the last section of this article: Installing and Securing the Apache Webserver with SSL by Dale Coddington <[EMAIL PROTECTED]> http://www.securityfocus.com/focus/sun/articles/apache-inst.