up vote 2 down vote favorite
share [g+] share [fb]

Is Chrooting apache/mysql/php a standard practice of securing web servers containing sensitive data (is it necessary)?

link|improve this question
96% accept rate
feedback

1 Answer

up vote 6 down vote accepted

No, chrooting isn't standard practice with Apache. I wouldn't consider it necessary either. However, chuser and chgroup are-- you shouldn't run Apache as root. Doing all three is common with BIND. You should default to running with least privileges necessary with all daemons and all cases.

It's arguable that chrooting is pointless in a lot of cases as well. Check out Abusing a chroot jail.

link|improve this answer
Very informative post, though it seems to desire as a premise the contained processes and users can chroot themselves\have root priveledges. Which from the comments I understand is avoidadble in a properly setup chroot.. – Joshua Enfield May 11 '10 at 17:06
I agree with your point. – Warner May 11 '10 at 17:17
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.