Re: [mod-security-users] mod_security, apache2 and chroot -> help

[Ivan R. <iv...@we...>]

Astarna wrote:
> Hello
> 
> I'm having some major problems getting chroot to work properly with
 > mod_security.. hoping someone will be able to help.
 >
 > ...
> 
> I've created the following directories within the chroot jail
> 
> /var/chroot/apache/var/run
> /var/chroot/apache/var/www
> /var/chroot/apache/usr/lib/apache2
> 
> I've moved my apache files (/usr/lib/apache2) to /var/chroot/apache/usr/lib/apache2. 
> I've created a symlink in /usr/lib/apache2 to point to /var/chroot/apache/usr/lib/apache2. 
> based off of this link: http://sourceforge.net/mailarchive/forum.php?thread_id=5863509&forum_id=33492

   Because you have files in three locations one symlink isn't going
   to handle them all. You also need to link /var/www to
   /var/chroot/apache/var/www. I propose that you keep the pidfile
   somewhere in /usr/lib/apache2 to avoid having to create a third
   symlink.


> I've edit'd the /etc/apache2.conf with the following values:
> ServerRoot /var/chroot/apache/usr/lib/apache2
> DocumentRoot /var/chroot/apache/var/www/localhost/htdocs

   These two are not correct. You need to use:

   ServerRoot /usr/lib/apache2
   DocumentRoot /var/www/localhost/htdocs

-- 
Ivan Ristic (http://www.modsecurity.org)