chroot & mount --bind = security ?

From: Julien Nury (jnury_at_voila.fr)
Date: 04/06/04

  • Next message: link: "Re: chroot & mount --bind = security ?" 
    Date: 6 Apr 2004 06:51:48 -0000
To: focus-linux@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    Hi,
     
    Imagine :
     - An apache web server chrooted in /chroot/httpd, this server publish document in /chroot/httpd/var/www
     - A FTP server chrooted in /chroot/ftpd

    If we want to use the ftp server to update documents published by the web server, we have to open a communication between the 2 chrooted folders (!!!)
     
    I would like to do like this :
     
     - A folder /var/www witch contains my html documents
     - mount --bind /var/www /chroot/httpd/var/www to allow the web server to access them
     - mount --bind /var/www /chroot/ftpd/var/www to allow the ftp server to update them

    And now ... questions :

     - does it working ?
     - is there a security problem with it ?
     - is there another method (more secure/simple) to do this ?

    Thanks for your read, have a nice day.

    Julien Nury

  • Next message: link: "Re: chroot & mount --bind = security ?"

    Relevant Pages

    • Re: utf8 and ftplib
      ... It opens a new local file using utf8 encoding and then reads from a file ... characters from the source file (e.g. foreign characters, ... Is there any way that I can correctly retrieve a utf8 encoded file from an FTP server? ... to be decoded to unicode on being read later. ...
      (comp.lang.python)
    • [SLE] OT Digital Alpha 3000 server Assistance requested
      ... ('binary' encoding is not supported, ... I hope that someone on this list might have some idea of where to find the relavant ... downloading the 8.1 version of SUSE for Alpha from the FTP server. ... Processor Digital Alpha 21164, 500MHZ ...
      (SuSE)
    • [SLE] ftp server how?
      ... ('binary' encoding is not supported, ... I want to set up my ftp server and define the directory that i want to ... Also check the archives at http://lists.suse.com ... Please read the FAQs: suse-linux-e-faq@suse.com ...
      (SuSE)
    • Re: Mozilla (et al.) v. TCPIP FTP server
      ... I find it difficult to imagine that any other ... FTP server on the planet would fail to accept a file name which that FTP ... But if HGFTP works, you ... can install it on any of the VMS TCP/IP stacks. ...
      (comp.os.vms)
    • Re: FTP Woes
      ... Linux ninja, I do know enough to be able to do the day to day tasks. ... I can't imagine that setting up an FTP server could be any ... I want to give one person write access to the /var/www folder ...
      (Ubuntu)