[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Handling the new Apache chroot



On Thu, Nov 07, 2002 at 12:15:20AM +0100, Henning Brauer wrote:
> yes.
> 
> however, sometimes you have not much choices. not beeing libc-specific - of
> course a merely empty chroot is best. but if you need to run application/cgi
> X, it is still better to have the stuff app X needs inside the chroot than
> running -u just because it works then.

I totally agree, Henning...  In this specific instance, I do
have an alternative, and it's one that keeps libc out of the
chroot.

Your second point is a good one too - it _would_ be better
to copy libwhatever into the chroot and continue using the
chroot, rather than eliminate it altogether.

Thanks for all your help/discussion!

Benny


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
There's always time for Cheerios...



Visit your host, monkey.org