I have been advised by a sysadmin guy I know, to run Apache in a chroot jail, for increased security.
I have the following questions:
- Is this advisable (i.e. are there any 'gotcha's that I need to be aware of) ?
- Does running Apache in a chroot jail affect its ability issues like performance and scalability?
He also advised that I run my databases (mySQL and PostgreSQL), in separate chroot jails.
Is this something that is often done in production systems
[Edit]
Forgot to say, Server is running on Ubuntu 8.04 LTS