On 07/05/2009 04:24 AM, Simon Loewen wrote:
>
>       I have installed the webadmin part and am trying to run this from a
> httpd chroot, but of course this fails.  I suppose cgi-bin/webadmin
> cannot find the rest of courier because it is chrooted.
>
> Running apache outside of a chroot environment  would probably be a
> workaround, but I prefer to run it inside a chrooted environment.

That doesn't make any sense.  The purpose of chroot is to isolate a 
process from the filesystem outside of the chroot.  It is completely 
illogical to attempt to isolate a management tool from the system it is 
intended to manage.

If you're trying to increase the security of your system, look 
elsewhere.  The webadmin CGI runs as root.  chroot's design 
intentionally allows the root user to leave the chroot.  You cannot use 
chroot isolation as a security restriction for processes that run as the 
root user.

------------------------------------------------------------------------------
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to