[mod-security-users] Re: mod_security, apache2 and chroot -> help

[Mark P. <m_p...@ya...>]

Hi,

I can't quite see where your problem is occuring.. but
I have an alternate method that doesn't involve moving
files around or creating links. 

I'm sure there are even more elegant ways too...

1) httpd.conf

Note that the PidFile will locate itself in
$SecChrootDir/$ServerRoot/$PidFile
		
	ServerRoot=/opt/apache
	PidFile ./httpd.pid
	DocumentRoot "/htdocs/www"

2) mod_security.conf

	SecChrootDir /jail

3) Directory Structure:

Note the real location for your documents and the
place you should use is in /jail/htdocs/www
		
          mkdir /jail/htdocs/www
          mkdir /jail/opt/apache

Note that with this method $ServerRoot and
$DocumentRoot paths need to be valid paths both inside
and outside the jail. httpd will fail to start if the
non-jailed directory path to $DocumentRoot does not
exist.
          
          mkdir /htdocs/www	

Mark



	
		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - You care about security. So do we. 
http://promotions.yahoo.com/new_mail