Re: What are the dangers of having a Webserver?

From: Luke Vogel (luke@bell-bird.com.au)
Date: 12/03/02


From: Luke Vogel <luke@bell-bird.com.au>
Date: Tue, 03 Dec 2002 16:45:56 +1000

Nico Kadel-Garcia wrote:

> "Luke Vogel" <luke@bell-bird.com.au> wrote in message

>>Has anyone tried using the http server that can be compiled into the
>>kernel? Should be pretty good on the performance benchmarks one would
>>think.
>>
>
> Umm. If HTTP access is all you need sure. But for many modern web sites, the
> configuration and scripting capability is a big deal. PHP capability, for
> example, linking in the RealAudio streaming server, and all sorts of
> logging/upload/administrative capabilities are vital to many though not all
> servers.

Yes I know, but in the context of this thread where the op was looking
for very basic html capability, I thought it might be interesting to see
if anyone has had any experience with the kernel http server.

-- 
Regards
Luke
------
When I die, I want to die like my Grandmother who died peacefully
in her sleep. Not screaming like all the passengers in her car.
------
C.O.L.S FAQ - http://www.linuxsecurity.com/docs/colsfaq.html
------


Relevant Pages

  • Re: "Random" number generation (reprise)
    ... The client asks for a capability to be created. ... The server tracks the permissions and binds ... Your take on kernel capabilities unquestionably would work among ...
    (comp.arch.embedded)
  • Re: "Random" number generation (reprise)
    ... The client asks for a capability to be created. ... The server tracks the permissions and binds ... resides in the kernel). ...
    (comp.arch.embedded)
  • Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation
    ... Vulnerable: Linux kernel 2.6.* ... When POSIX Capability LSM module isn't compiled into kernel, ... Capability module into kernel, all existed normal users processes will have ... total Capability privileges of superuser. ...
    (Bugtraq)
  • Re: "Random" number generation (reprise)
    ... security in userland instead of in the kernel. ... The kernel knows who owns the capability. ... customer A and the other half in a box for customer B. (I'm ... in the first box and the image server ...
    (comp.arch.embedded)
  • Re: "Random" number generation (reprise)
    ... the problem comes when the capability has to be ... E.g., a client connects to a server (because, somehow, it is allowed to ... If the act of configuration requires physical access to the devices ...
    (comp.arch.embedded)