Re: Introducing mod_privileges for Apache HTTPD

2008-11-17 Thread Nick Kew
On Mon, 17 Nov 2008 16:51:15 +0900 KaiGai Kohei <[EMAIL PROTECTED]> wrote: > Hello, Nick > > It seems to me we have similar ideas to enhance web-application > security. I've focused on SELinux to utilize security features > of operating system. > > I had a plan to start discussion after my Postg

Re: Introducing mod_privileges for Apache HTTPD

2008-11-16 Thread KaiGai Kohei
Hello, Nick It seems to me we have similar ideas to enhance web-application security. I've focused on SELinux to utilize security features of operating system. I had a plan to start discussion after my PostgreSQL works are closed, but, it is a good time to start discussion to utilize them for we

AW: Introducing mod_privileges for Apache HTTPD

2008-11-14 Thread Plüm, Rüdiger, VF-Group
> -Ursprüngliche Nachricht- > Von: "Plüm, Rüdiger, VF-Group" > Gesendet: Freitag, 14. November 2008 14:58 > An: dev@httpd.apache.org > Betreff: Re: Introducing mod_privileges for Apache HTTPD > > > > > -Ursprüngliche Nachricht- >

Re: Introducing mod_privileges for Apache HTTPD

2008-11-14 Thread Plüm, Rüdiger, VF-Group
> -Ursprüngliche Nachricht- > Von: Nick Kew [mailto:[EMAIL PROTECTED] > Gesendet: Freitag, 14. November 2008 11:22 > An: webstack-discuss; dev@httpd.apache.org > Betreff: Introducing mod_privileges for Apache HTTPD > > I've just introduced mod_privil

Re: Introducing mod_privileges for Apache HTTPD

2008-11-14 Thread Nick Kew
On Fri, 14 Nov 2008 14:25:15 +0200 Issac Goldstand <[EMAIL PROTECTED]> wrote: > > Cute. I haven't looked at the code yet, but the concept sounds > awesome. > > It would be great if there was a 2.2 backport so I could see if I can > get it working in our existing stack at work - we're just upgra

Re: Introducing mod_privileges for Apache HTTPD

2008-11-14 Thread Issac Goldstand
Cute. I haven't looked at the code yet, but the concept sounds awesome. It would be great if there was a 2.2 backport so I could see if I can get it working in our existing stack at work - we're just upgrading our web-stack for the next few years, and the latest CoolStack is 2.2 so no real chanc

Introducing mod_privileges for Apache HTTPD

2008-11-14 Thread Nick Kew
I've just introduced mod_privileges to Apache HTTPD trunk. This is a platform-specific module for Solaris 10 and OpenSolaris, that makes the webserver privileges(5)-aware. This enables the server to be run with enhanced security, and with different settings per virtual host. The feature likely