Re: Handling the new Apache chroot

["C. Bensend" <benny_(_at_)_bennyvision_(_dot_)_com>]

On Thu, Nov 07, 2002 at 12:15:20AM +0100, Henning Brauer wrote:
> yes.
> 
> however, sometimes you have not much choices. not beeing libc-specific - of
> course a merely empty chroot is best. but if you need to run application/cgi
> X, it is still better to have the stuff app X needs inside the chroot than
> running -u just because it works then.

I totally agree, Henning...  In this specific instance, I do
have an alternative, and it's one that keeps libc out of the
chroot.

Your second point is a good one too - it _would_ be better
to copy libwhatever into the chroot and continue using the
chroot, rather than eliminate it altogether.

Thanks for all your help/discussion!

Benny


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
There's always time for Cheerios...