Gentoo Archives: gentoo-security

From: Anders Bruun Olsen <anders@×××××××××××.net>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Advice about security solution
Date: Wed, 09 Nov 2005 21:21:17
In Reply to: Re: [gentoo-security] Advice about security solution by unaos
On Wed, Nov 09, 2005 at 09:19:38PM +0200, unaos wrote:
> > Hmm.. any good guides or pointers to get Apache, MySQL, Postfix, > > Courier-imap, rsyncd, ventrilo, cs-server, zope and so on to run in > recommends mod_chroot for Apache.
I have tried using mod_chroot just earlier today, but ran into trouble because I use mod_auth_pam, which of course does not work correctly inside a chrooted env. I am thinking about going all out and putting my users in an LDAP directory, which would make it possible to put Apache and other services in chroots since auth etc. would consist of connecting to the LDAP daemon and not of asking PAM to look into /etc/shadow. -- Anders -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS/O d--@ s:+ a-- C++ UL+++$ P++ L+++ E- W+ N(+) o K? w O-- M- V PS+ PE@ Y+ PGP+ t 5 X R+ tv+ b++ DI+++ D+ G e- h !r y? ------END GEEK CODE BLOCK------ PGPKey: -- gentoo-security@g.o mailing list


Subject Author
Re: [gentoo-security] Advice about security solution xyon <xyon@×××××××××××.com>