I was working few weeks ago to recover the project Wicap-PHP: https://github.com/LogicalBricks/wicap-php
Caleb Phillips give me the source code to maintain. Now it works for OpenBSD 5.x. The behavior is really simple, but maybe need a good install script. On Tue, Aug 21, 2012 at 10:10 AM, Stuart Henderson <s...@spacehopper.org>wrote: > On 2012-08-21, David Diggles <da...@elven.com.au> wrote: > > On Mon, Aug 20, 2012 at 12:42:16PM -0700, Byron Klippert wrote: > >> The web interfaces interact with the system through CGI scripts, httpd > >> is run chroot disabled (httpd_flags="-u"). > > > > Just one comment for now. You can run it as chroot if you copy any > > dependancies into the chroot, including binaries, libraries. > > > ...and be sure to update them if patches come out. > > depends what's needed, but it's often not really a security win > to copy enough of the OS into the chroot jail so that scripts can > run, especially if it means it's unlikely to be kept updated. > > OTOH if the only need for non-chroot is to access PF tables, and > the scripts are in a language which can easily run inside chroot > (e.g. perl with mod_perl), see the 'tabled' package. > > -- Hermes Ojeda Ruiz LogicalBricks Solutions http://logicalbricks.com