putting Apache into chroot()-prison

["R. M. Lampert" <romulus@arcormail.de>]

Hi, folks!

Due to some very unpleasant experience in the company
I'm working at (rootshell attack due to a buffer overflow
intrusion in httpd...)  there's a great need with us
to inform thoroughly about changing to a safer environment, 
that is LAMP  or even better NAMP (NetBSD, Apache ... there
are some very unpalatable truths in the world, indeed!).

Of topmost interest is building Apache and everything
that is associated with it (particularly MySQL, PHP, Perl) 
within a chroot() environment to lock intruders within 
this special ,,root directory``.  

Do you know any pointer to chroot()-information that includes
some kind of HOWTO rather than a list of advantages of this
approach?

Thanx in advance,


-- 

Matthias Lampert                       
                                   .^.         
Graal-Müritzer-Str. 1b ||          /V\           
22885 Barsbüttel       ||        /(   )\
Tel: (040) 670 89 445  ||         ^^-^^