Re: [d-security] Re: SECURITY HOLE in MySQL module in PHP

[Ralf Dreibrodt <ralf@dreibrodt.de>]

Hi,

Javier Fernández-Sanguino Peña wrote:
> 
> On Wed, Feb 06, 2002 at 05:31:23PM +0100, Christian Hammers wrote:
> > On Wed, Feb 06, 2002 at 05:26:27PM +0100, Ralf Dreibrodt wrote:
> > > just run apache chrooted and you don?t have problems like this.
> > Doesn't work well if you have multiple virtual hosts on one server.
> >
> 
> Could someone give a sample setup for the Debian-Security-HOWTO? With
> a sample setup I mean one which can be easily made based on the
> standard Debian configuration (not a referral to the Chrooting-HOWTO).

just "mkdir /chroot", copy some basic files to /chroot, then "chroot
/chroot" and apt-get install apache.

i don´t think, that chrooting apache is easy (or even possible) in a
packet.
you need nearly everything in chroot (e.g. perl, c-compiler and so on).

bye
Ralf