Re: Apache and home directories (file browser).

From: Andy Dills (andy_at_xecu.net)
Date: 02/16/04

  • Next message: Lewis Thompson: "Re: Apache and home directories (file browser)."
    Date: Mon, 16 Feb 2004 17:31:13 -0500 (EST)
    To: Lewis Thompson <purple@lewiz.net>
    
    

    On Mon, 16 Feb 2004, Lewis Thompson wrote:

    > I think this is what I'm looking for, yes. Since I posted this I asked
    > some questions on IRC and somebody mentioned that Apache can be chrooted
    > to the uid of a script's owner (similar in a way to safe_mode in PHP).
    > This would surely then allow files to be read/written by Apache in a
    > secure fashion.
    >
    > My worry here is that Apache would have to be running as root to
    > chroot -- can anybody confirm this for me? (Indeed, can anybody confirm
    > that it is even possible to do this?)

    While you can chroot apache, that's serverwide, not per-virtualhost.

    If I were you and I wanted to do what you're talking about, I'd use suexec
    with perl scripts. AFAIK, that's the only way to do it correctly.

    Andy

    ---
    Andy Dills
    Xecunet, Inc.
    www.xecu.net
    301-682-9972
    ---
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
    

  • Next message: Lewis Thompson: "Re: Apache and home directories (file browser)."

    Relevant Pages

    • chrooted apache 2 on AIX - Killed
      ... I am setting up a chroot environment for apache (IBM IHS 2.0.47.1) on ... and exit code ...
      (comp.unix.aix)
    • chrooted apache 2 - Killed
      ... I am setting up a chroot environment for apache (IBM IHS 2.0.47.1) on ... and exit code ...
      (AIX-L)
    • Re: apache mod_ssl chroot problem
      ... I have problem running apache in chroot mode with ssl enable. ... Apache/2.2.6 mod_ssl/2.2.6 (Pass Phrase Dialog) ... Some of your private key files are encrypted for security reasons. ...
      (freebsd-questions)
    • Re: jails or chroot?
      ... putting each of my clients into their own jail or chroot. ... apache and their "mass virtual hosting", ... File access can be solved with suexec (compile apache with suexec ...
      (freebsd-questions)
    • Re: Log full directory paths for errors?
      ... We're trying to run Apache 2.0.55 in a chrooted environment, but are having problems getting it to work for even just the most basic request, and are getting 404 errors. ... For testing, we created a directory named "test" under the "htdocs" directory under the chroot directory, e.g., ...
      (comp.infosystems.www.servers.unix)