As they say, security comes at the cost of convenience (and storage in
this case), so I think the most secure solution is to just copy over the
data I need to publish to the chroot. I've given it thought, and I don't
want the potential apache hax0r to get to (and potentially delete) all
my original pictures/videos. The downside is that I'll probably have 90%
of them copied to the /chroot/www directory for publishing.
The mount --bind thing looked nice, but you can't change the mount
permissions from what those directories already have, i.e. if I have
/stuff/pics on a filesystem mounted rw, I can't then mount --bind it to
ro. At least that's what the man page says. If I could mount it to ro,
that might be a better alternative.
Thanks,
Brian
Hans-Werner Hilse wrote:
Hi,
On Mon, 13 Nov 2006 12:04:51 +0100 Alex <[EMAIL PROTECTED]> wrote:
i would suggest an alias for this ->
http://httpd.apache.org/docs/2.0/mod/mod_alias.html#alias
Aliases werde made for this kind of problem ( data's were not in the
documentroot)
Yep, but they're not made for *this* exact kind of problem: Here, the
file isn't even in the accessible filesystem namespace.
BTW, I've always found it easier to manage a bunch of symlinks instead
of numerous .htaccess files. But again, in the OP's case neither works.
-hwh
--
gentoo-user@gentoo.org mailing list
