Re: [us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-17 Thread SYBA
Thanks for that Dave.Current environment requirements do not let me use SELinux hence I was wondering id there are any more comments on ChrootDir directive ? Thanks. S. On 17 November 2010 08:37, David (Dave) Donnan david.don...@thalesgroup.com wrote: Just a thought recommended to me by

[us...@httpd] security: fully blown chroot environment vs chrootdir

2010-11-16 Thread SYBA
Hello, I was running apache for a number of years using fully blown chroot environment, mostly on RHEL (using chroot binary as a base). Recently, I have faced a requirement to wrap it up into rpm, which is not an easy task, considering all up to date libs, dependencies, etc. As chrootdir