Re: [mod-security-users] Using SecChrootDir Directive

[Roman Medina-H. H. <ro...@rs...>]

Ivan Ristic wrote:

>   SecChrootDir /chroot/apache
> 
>   Everything else can remain outside jail but there are consequences
>   (e.g. you won't be able to restart Apache, just stop-start it).

And what about Perl/Python/* libraries needed for CGIs? Let's suppose we
have cgi-bin directory inside chroot jail (for instance,
/chroot/apache/www/cgi-bin). That's ok, but what will be happen when the
 invoked cgi try to execute /usr/bin/perl or moreover when it needs
/usr/lib/perl/* files (all of them are out of the jail)?

-- 

Saludos,
-Roman

PGP Fingerprint:
09BB EFCD 21ED 4E79 25FB  29E1 E47F 8A7D EAD5 6742
[Key ID: 0xEAD56742. Available at KeyServ]