[mod-security-users] Chroot and name resolution with PHP

[David F. <Da...@me...>]

Hi,

I'm using mod_security-1.8.3, with Apache httpd-2.0.50 and PHP 4.3.7 on
Slackware linux.

In one of my PHP scripts I use the fsockopen function, which requires a
name (e.g www.example.com) to be resolved. This works fine if I do not use
the chroot capabilities of mod_security. However, with the chroot running,
I get errors like 

Warning: fsockopen(): php_network_getaddresses: getaddrinfo failed: Name
or service not known

Adding these files to the chroot gets rid of the problem:

/chroot/apache/lib/libnss_dns.so.2
/chroot/apache/libnss_files.so.2
/chroot/apache/libresolv.so.2
/chroot/apache/etc/resolv.conf

Everything else in the chroot work really well using mod_security, without
having to find all the libraries and put them in the chroot. That's what I
really like about mod_security!

Is there some way to avoid the need to put these name resolution libraries
in the chroot?

Thanks for any help,

David Fletcher.

-- 
-------------------------------------------------
Email: David at megapico dot co dot uk
-------------------------------------------------