It strange what you say, because a lot services under linux, can and runs under chroot ex. DNS,HTTP,FTP,SSH(?),Mail(Postfix),Databases(MySql). I know that BSD has a bit better security, but for now I' m not going to install BSD. And as for linux even a bit more security like chroot services, can increase security. I understand that chroot isn't perfect but if you add e.g. GRsecurity patch , it has a big advantage over non chroot environment. It doesn't cost me a lot (at least I hope),to install in chroot, so why I shouldn't do that.
Regards, Krystian Brian Candler wrote: > On Fri, Jan 19, 2007 at 07:03:01AM -0500, Sam Varshavchik wrote: > >> In as many years as I can remember, nobody cared >> about running anything, courier-imap, or courier-authlib, in chroot. >> > > For Linux maybe; but OpenBSD runs every daemon that it can in a chroot > environment. > > Even on Linux systems, I often see 'named' running in a chroot. That's > probably a sensible idea; ISC BIND is an extremely big and complex beast. > > OTOH, if you said that running as a non-root user is more important, I'd > agree. Besides, to run a big package in a chroot environment, you'll need so > many libraries and other bits that if anyone breaks in they'll have a pretty > functional system anyway. > > Regards, > > Brian. > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys - and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Courier-imap mailing list > Courier-imap@lists.sourceforge.net > Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap > ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Courier-imap mailing list Courier-imap@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap
