Justtechjobs.com Find a programming school near you






Online Campus Both


php3-list | 199807

RE: [PHP3] Security concern w/ PHP3/FrontPage combo From: Sparks, Alan (asparks <email protected>)
Date: 07/27/98

Running the server itself in a chroot() environment will help only isolate the
server processes from the filesystem outside of the document tree. This is an
issue of access within the document tree.
Unless you can figure out how the web server running PHP in module form can keep
chroot()ing itself, which won't work (can't gain back what you gave away), plus
is a config nightmare anyway.

-Alan

-----Original Message-----
From: Palle Girgensohn [mailto:girgen <email protected>]
Sent: Monday, July 27, 1998 1:54 PM
To: Sparks, Alan
Cc: 'Sander Steffann'; php3 <email protected>
Subject: Re: [PHP3] Security concern w/ PHP3/FrontPage combo

One could probably enhance security by running the web server in a
chrooted system. For example, Wietse Venema's chrootuid could be used.
Check out ftp://ftp.win.tue.nl/pub/security/index.html#software ->
Chrootuid.

I haven't tried this myself, though. Yet... :)

/Palle 

--
PHP 3 Mailing List   http://www.php.net/
To unsubscribe send an empty message to php3-unsubscribe <email protected>
To subscribe to the digest list:  php3-digest-subscribe <email protected>
For help: php3-help <email protected>  Archive:  http://www.php.net/mailsearch.php3

--
PHP 3 Mailing List   http://www.php.net/
To unsubscribe send an empty message to php3-unsubscribe <email protected>
To subscribe to the digest list:  php3-digest-subscribe <email protected>
For help: php3-help <email protected>  Archive:  http://www.php.net/mailsearch.php3