> From [EMAIL PROTECTED] Wed Dec 10 16:05:14 2008
> From: "Tim Saueressig, thepixelz.com" <[EMAIL PROTECTED]>
> User-Agent: Thunderbird 2.0.0.18 (Windows/20081105)
> MIME-Version: 1.0
> To: misc@openbsd.org
> Subject: libm changes
> Content-Type: text/plain; charset=ISO-8859-15; format=flowed
> Con
> From owner-misc+m85945=martynas=altroot@openbsd.org Wed May 27 15:35:42
> 2009
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com;
> s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject
> :from:to:content-type:content-transfer-encoding;
> bh=R
> From owner-misc+m85949=martynas=altroot@openbsd.org Wed May 27 16:51:34
> 2009
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com;
> s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references
> :date:message-id:subject:from:to:content-type :content-tr
Hello,
I want to chroot mysql. So i chrooted it in /var/mysql (mysqld --chroot),
but web applications could access mysql server only by network, which is
not the most secure and fast way. Chrooting it to /var/www/mysql would not
be secure too.
The problem could be solved creating pseudo device fo
> I'm still not clear on exactly why a domain socket is more secure than a
> localhost tcp socket. Faster? Sure, but probably not by an amount that
> matters. More secure? I really don't see how in this case.
Okay, why we should it listen to unneded port? Somebody could insensibly
redirect packets
> I am not sure as I have not tried it, but I think mySQL creates its unix
> socket *before* it calls chroot() [or can be very easily fixed anyways].
No it can't create socket before chroot(), then how it would access mysql
data?
Okay, everything works like a charm.
I chrooted mysql using chroot(8), than created pseudo file, and 2 vnode
disks.
Then mount {vnode disk} /{chroot path}/var/run/mysql && mount -f {vnode2
disk} /var/www/var/run/mysql.
> From owner-misc+m89...@openbsd.org Sun Aug 23 01:26:36 2009
> To: matecocido
> Cc: misc@openbsd.org, marty...@openbsd.org
> From: Stuart Henderson
> Subject: Re: TiMidity Port trouble
> Date: Sat, 22 Aug 2009 23:22:39 +0100
>
> In gmane.os.openbsd.misc, matecocido wrote:
> > Hi!
> >
> > I wont
8 matches
Mail list logo
