Re: [us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-17 Thread SYBA
Thanks for that Dave.Current environment requirements do not let me use SELinux hence I was wondering id there are any more comments on ChrootDir directive ? Thanks. S. On 17 November 2010 08:37, David (Dave) Donnan wrote: > Just a thought recommended to me by RedHat last year. > > Run SELinu

[us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-16 Thread SYBA
Hello, I was running apache for a number of years using fully blown chroot environment, mostly on RHEL (using "chroot" binary as a base). Recently, I have faced a requirement to wrap it up into rpm, which is not an easy task, considering all up to date libs, dependencies, etc. As chrootdir direct