Forum

Howto chroot Hiawatha in Debian

Paolo Migoni
16 February 2008, 03:53
Hello, sorry peraphs for the requested answer, but i'm really researched on google and in this forum but i haven't understand this thing:

i wish chroot Hiawatha on my Debian Etch.

How can i do ? i'm not intend with ServerRoot, but a REALLY jail chroot.

Any exaustive help would be really appreciate :-)

p.s. but chroot'ing hiawatha is a really useful thing to do ?

thanks to everyone !
Hugo Leisink
16 February 2008, 08:19
Don't be sorry for asking a question on this forum. That's what it's for.

ServerRoot is what you are looking for: it will chroot Hiawatha to the specified directory. Or what do you mean with a REAL jail chroot.
Paolo Migoni
16 February 2008, 11:38
Thanks Hugo :-)

For a real jail i mean: chroot hiawatha with hard links to libraries, with all the necessary for mantain hiawatha in a isolate dir with all the necessary.

As, for example, the modsecurity (libapacheX-mod-security) patch for Apache.

This is what i'm intend for chroot'ing hiawatha :-)
Hugo Leisink
16 February 2008, 19:07
The ServerRoot option in Hiawatha is the same as SecChrootDir in mod_security. In Hiawatha, support for chroot is even better than in Apache. Hiawatha supports chroot-ed FastCGI servers and it comes with a tool called 'newroot' to copy binaries to the chroot directory.

Look in the manualpages for more information: ServerRoot in the hiawatha manpage, the newroot manualpage and Server in the php-fcgi manualpage.

Let me know if you have any questions.
Paolo Migoni
18 February 2008, 10:45
Thanks for the help, Hugo :-)
Now i'll study well the man pages.
I'm working with Hiawatha in a productivity environment from 1 month about, and this web server works very well. Simply, stable and secure. Good work, Hugo :-)
This topic has been closed.