Re: Secure Apache Webserver

2006-10-30 Thread Marc Balmer
Joachim Schipper wrote: I believe it is possible to set this up using FastCGI, which will actually be (reasonably?) fast too. Yes, I am a FastCGI fanboy. I just spent the whole day setting up FastCGi using www/mod_fastcgi and www/fcgi. I ended up with a server process, written C, that runs

Re: Secure Apache Webserver

2006-10-30 Thread Joachim Schipper
On Sun, Oct 29, 2006 at 03:20:25PM +0100, Aiko Barz wrote: > Hello, > > I already discussed this subject on the list. There were several > possible solutions for this subject and I have chosen one, I would like > to present now. > > The problem: I have several vhosts, which are used by several pe

Secure Apache Webserver

2006-10-29 Thread Aiko Barz
Hello, I already discussed this subject on the list. There were several possible solutions for this subject and I have chosen one, I would like to present now. The problem: I have several vhosts, which are used by several people. The Apache is running with $UID 67. Users can access the system by

Re: Secure Apache Webserver

2006-09-29 Thread Damian Wiest
On Fri, Sep 29, 2006 at 11:16:44AM +0200, Toni Mueller wrote: > Hello, > > On Thu, 28.09.2006 at 09:47:51 -0400, James Strandboge <[EMAIL PROTECTED]> > wrote: > > Its extra work, but you could setup completely different chroots for > > each domain. This way each domain is isolated and you can ta

Re: Secure Apache Webserver

2006-09-29 Thread Mark Bucciarelli
On Thu, Sep 28, 2006 at 05:48:26PM +0200, Joachim Schipper wrote: > On Thu, Sep 28, 2006 at 12:52:41PM +0200, Joachim Schipper wrote: > > On Thu, Sep 28, 2006 at 10:55:30AM +0200, Aiko Barz wrote: > > > The issue: If my users start to install a php-Filebrowser, they are > > > able to access the oth

Re: Secure Apache Webserver

2006-09-29 Thread Stuart Henderson
On 2006/09/29 11:16, Toni Mueller wrote: > On Thu, 28.09.2006 at 09:47:51 -0400, James Strandboge <[EMAIL PROTECTED]> > wrote: > > Its extra work, but you could setup completely different chroots for > > each domain. This way each domain is isolated and you can tailor each > > one to the user's n

Re: Secure Apache Webserver

2006-09-29 Thread Toni Mueller
Hello, On Thu, 28.09.2006 at 09:47:51 -0400, James Strandboge <[EMAIL PROTECTED]> wrote: > Its extra work, but you could setup completely different chroots for > each domain. This way each domain is isolated and you can tailor each > one to the user's needs. with this, you quickly run into the

Re: Secure Apache Webserver

2006-09-28 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 12:52:41PM +0200, Joachim Schipper wrote: > On Thu, Sep 28, 2006 at 10:55:30AM +0200, Aiko Barz wrote: > > Hi *, > > > > I use OpenBSD+Apache+Chroot for my webservices. The users can access > > their vhosts by using scponly, which is chrooted into /var/www as > > well. > >

Re: Secure Apache Webserver

2006-09-28 Thread L. V. Lammert
On Thu, 28 Sep 2006, James Strandboge wrote: > On Thu, 2006-09-28 at 10:55 +0200, Aiko Barz wrote: > > Hi *, > > > > I use OpenBSD+Apache+Chroot for my webservices. The users can access > > their vhosts by using scponly, which is chrooted into /var/www as > > well. > > /htdocs/www.example.net belo

Re: Secure Apache Webserver

2006-09-28 Thread James Strandboge
On Thu, 2006-09-28 at 10:55 +0200, Aiko Barz wrote: > Hi *, > > I use OpenBSD+Apache+Chroot for my webservices. The users can access > their vhosts by using scponly, which is chrooted into /var/www as > well. > /htdocs/www.example.net belongs to theuser:www and has the > permissions rwxr-x---. >

Re: Secure Apache Webserver

2006-09-28 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 10:55:30AM +0200, Aiko Barz wrote: > Hi *, > > I use OpenBSD+Apache+Chroot for my webservices. The users can access > their vhosts by using scponly, which is chrooted into /var/www as > well. > /htdocs/www.example.net belongs to theuser:www and has the > permissions rwxr-x

Re: Secure Apache Webserver

2006-09-28 Thread Henning Brauer
* Aiko Barz <[EMAIL PROTECTED]> [2006-09-28 10:59]: > Hi *, > > I use OpenBSD+Apache+Chroot for my webservices. The users can access > their vhosts by using scponly, which is chrooted into /var/www as > well. > /htdocs/www.example.net belongs to theuser:www and has the > permissions rwxr-x---. >

Secure Apache Webserver

2006-09-28 Thread Aiko Barz
Hi *, I use OpenBSD+Apache+Chroot for my webservices. The users can access their vhosts by using scponly, which is chrooted into /var/www as well. /htdocs/www.example.net belongs to theuser:www and has the permissions rwxr-x---. The issue: If my users start to install a php-Filebrowser, they ar