Forum

Apparmor and CGIWrapper

Samiux

9 September 2009, 06:31

Hiawatha version: 6.17.1
Operating System: Ubuntu 9.04 Server

First of all, I do not know how to set cgi-wrapper. Would you mind telling me how to set it up?

By the way, I am using apparmor. I wonder if it is necessary to make my web server more secure by implement the cgi-wrapper also?

Hugo Leisink

10 September 2009, 08:29

It depends on what you try to achieve. You should only use the cgi-wrapper for a reason. Otherwise it just make things slower.

So, what is it you want to achieve?

Samiux

10 September 2009, 12:40

Hugo Leisink,

What is the different between implement of cgi-wrapper and apparmor?

Samiux

Hugo Leisink

10 September 2009, 13:36

Although they both have something to do with security, they are completely different.

The cgi-wrapper can be used to run a CGI program with a different UID or to run them in a chroot environment.
Apparmor is a kernel patch to restrict actions for certain applications.

Samiux

10 September 2009, 23:03

Hugo Leisink,

Can I use php5-cgi in Apparmor to achieve the same purpose of cgi-wrapper?

Samiux

Hugo Leisink

11 September 2009, 00:14

No, Apparmor doesn't allow you to run a program in a chroot environment or to switch to another userid.

This topic has been closed.

Back