Re[2]: chroot & mount --bind = security ?

From: Marius Huse Jacobsen (mahuja_at_c2i.net)
Date: 04/08/04

  • Next message: Scott Gifford: "Re: Re[2]: chroot & mount --bind = security ?" 
    Date: Thu, 8 Apr 2004 15:12:42 +0200
To: link <focus-linux@securityfocus.com>

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Hello link,

    Tuesday, April 6, 2004, 8:28:01 PM, you wrote:

    >> I would like to do like this :
    >>
    >> - A folder /var/www witch contains my html documents
    >> - mount --bind /var/www /chroot/httpd/var/www to allow the web server to access them
    >> - mount --bind /var/www /chroot/ftpd/var/www to allow the ftp server to update them

    l> This is how I do it for my chroot'd ftp server, since 'ln -s' obviously

    How about 'ln' ?
    Presuming they are on the same mount point and media, a "hard link"
    shouldn't be a problem.

    I've never seen hard links being "not recommended" - perhaps except
    when symlinks could do the job.

    - --
    Best regards,
     Marius mailto:mahuja@c2i.net

    -----BEGIN PGP SIGNATURE-----

    iQA/AwUBQHVB35fZ2CSWpu1rEQK1LQCeNJq9MhNLb9XF+f2/d1Qf62Y/vLsAn2+h
    T+Mx0eJGKdOlM3U0cX+DWTDp
    =p1xb
    -----END PGP SIGNATURE-----

  • Next message: Scott Gifford: "Re: Re[2]: chroot & mount --bind = security ?"

    Relevant Pages

    • Re: Problem with (gnu) tar
      ... Hash: SHA1 ... In comp.unix.shell, Stephane CHAZELAS dared to utter, ... Another thing you may try is making a hard link in that directory, ... copying that file to another location and see if it's a problem with ...
      (comp.unix.shell)
    • Re: Problem with (gnu) tar
      ... Hash: SHA1 ... In comp.unix.shell, Stephane CHAZELAS dared to utter, ... Another thing you may try is making a hard link in that directory, ... copying that file to another location and see if it's a problem with ...
      (comp.os.linux.development.apps)