Howto chroot Hiawatha in Debian
Paolo Migoni
16 February 2008, 03:53
Hello, sorry peraphs for the requested answer, but i'm really researched on google and in this forum but i haven't understand this thing:
i wish chroot Hiawatha on my Debian Etch.
How can i do ? i'm not intend with ServerRoot, but a REALLY jail chroot.
Any exaustive help would be really appreciate :-)
p.s. but chroot'ing hiawatha is a really useful thing to do ?
thanks to everyone !
Hugo Leisink
16 February 2008, 08:19
Don't be sorry for asking a question on this forum. That's what it's for.
ServerRoot is what you are looking for: it will chroot Hiawatha to the specified directory. Or what do you mean with a REAL jail chroot.
Paolo Migoni
16 February 2008, 11:38
Thanks Hugo :-)
For a real jail i mean: chroot hiawatha with hard links to libraries, with all the necessary for mantain hiawatha in a isolate dir with all the necessary.
As, for example, the modsecurity (libapacheX-mod-security) patch for Apache.
This is what i'm intend for chroot'ing hiawatha :-)
Hugo Leisink
16 February 2008, 19:07
The ServerRoot option in Hiawatha is the same as SecChrootDir in mod_security. In Hiawatha, support for chroot is even better than in Apache. Hiawatha supports chroot-ed FastCGI servers and it comes with a tool called 'newroot' to copy binaries to the chroot directory.
Look in the manualpages for more information: ServerRoot in the hiawatha manpage, the newroot manualpage and Server in the php-fcgi manualpage.
Let me know if you have any questions.
Paolo Migoni
18 February 2008, 10:45
Thanks for the help, Hugo :-)
Now i'll study well the man pages.
I'm working with Hiawatha in a productivity environment from 1 month about, and this web server works very well. Simply, stable and secure. Good work, Hugo :-)
This topic has been closed.