note 39199 deleted from security.index by nlopess
| From: | nlopess@php.net | Date: | Tue, 20 Jan 2004 15:16:03 +0000 |
| Subject: | note 39199 deleted from security.index by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-63886@lists.php.net to get a copy of this message | ||
Note Submitter: möp@lmao.lompf
----
[code]Why not chroot the whole Apache Web Server (or any other Web Server running under UNIX)?
After that, Apache will run inside chroot jail, limiting by that access to server's filesystem.
For me, that's the first step in the process of securing PHP installations.
Also, for people running Linux, look at www.grsecurity.net (don't take this as a sort of
marketing ;), which is a great kernel security-related patch.[/code]
doh >_<
lompf
möp
rofl