Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Does it make sense to set up a chroot jail for a apache server which is the only service on the server? Or it is pointless, because the server is in either way lost if it get hacked?

share|improve this question

2 Answers 2

up vote 0 down vote accepted

Under those condition a chroot might potentially do more damage than good.

Depending on the amount of dynamic content being generated, you might have to copy a rather large chunk of libraries and binaries into the chroot. Unless you also have a easy and convenient way to keep the chroot updated you will most likely sooner or later end up with a rather vulnerable web site.

share|improve this answer

which is the only service on the server

Really? How do you change the content on the server? Even if that is the case, it does improve security - even if there are no other avenues for attack, it would limit the targets of attacks.

C.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.