Re: [us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-17 Thread SYBA
Thanks for that Dave.Current environment requirements do not let me use SELinux hence I was wondering id there are any more comments on ChrootDir directive ? Thanks. S. On 17 November 2010 08:37, David (Dave) Donnan wrote: > Just a thought recommended to me by RedHat last year. > > Run SELinu

Re: [us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-17 Thread David (Dave) Donnan
Just a thought recommended to me by RedHat last year. Run SELinux : SELinux can enforce the access rights of every user, application, process, and file within a Red Hat system to a degree previously unavailable in enterprise operating systems. It ensures that a

[us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-16 Thread SYBA
Hello, I was running apache for a number of years using fully blown chroot environment, mostly on RHEL (using "chroot" binary as a base). Recently, I have faced a requirement to wrap it up into rpm, which is not an easy task, considering all up to date libs, dependencies, etc. As chrootdir direct