Re: [gentoo-user] Symlinking out of a chroot

[Brian Davis]

As they say, security comes at the cost of convenience (and storage in 
this case), so I think the most secure solution is to just copy over the 
data I need to publish to the chroot. I've given it thought, and I don't 
want the potential apache hax0r to get to (and potentially delete) all 
my original pictures/videos. The downside is that I'll probably have 90% 
of them copied to the /chroot/www directory for publishing.

The mount --bind thing looked nice, but you can't change the mount 
permissions from what those directories already have, i.e. if I have 
/stuff/pics on a filesystem mounted rw, I can't then mount --bind it to 
ro.  At least that's what the man page says. If I could mount it to ro, 
that might be a better alternative.

Thanks,
Brian

Hans-Werner Hilse wrote:
> Hi,
>
> On Mon, 13 Nov 2006 12:04:51 +0100 Alex <alex@×××××××.de> wrote:
>
>
>> i would suggest an alias for this ->
>> http://httpd.apache.org/docs/2.0/mod/mod_alias.html#alias
>>
>> Aliases werde made for this kind of problem ( data's were not in the
>> documentroot)
>>
>
> Yep, but they're not made for *this* exact kind of problem: Here, the
> file isn't even in the accessible filesystem namespace.
>
> BTW, I've always found it easier to manage a bunch of symlinks instead
> of numerous .htaccess files. But again, in the OP's case neither works.
>
> -hwh
>
-- 
gentoo-user@g.o mailing list