Re: [mod-security-users] mod-security, SecChroot & suexec

[Ivan R. <iv...@we...>]

Jinn Koriech wrote:
> Hi Ivan,
> 
> Thanks for your response.
> 
> I have tried copying the /etc/passwd, /etc/group and /etc/shadow files 
> into the jail with no luck - still the same error.

   Have a look at page 46 of Apache Security (ch2): you may need
   /etc/nsswitch.conf and /lib/libnss_files.so too.


> Thanks for the link to the upcoming O'rielly Apache security book.

   It's been published in March this year :)


> I am 
> considering this approach as a last resort, however I would ideally like 
> to achieve the chroot without having to put all of Apache2 into the jail.

   Considering you want to start new processes - that may not be possible.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org