Click to See Complete Forum and Search --> : double-checking how secure my apache is


Fandelem
11-02-2000, 09:30 AM
I have set in apachectl to:

CHROOT=/www/chroot
#
# the path to your PID file
PIDFILE=$CHROOT/logs/httpd.pid
#
# the path to your httpd binary, including options if necessary
HTTPD=$CHROOT/apache/bin/httpd


which will make it _impossible_ to get access before $CHROOT (ie. /), right?

if I were to describe this to someone, would I be okay to tell them that this creates an environment inside of an environment which isolates it from everything else.. right?

what else can I do to 'bolster' down apache, besides just keep up-to-date with the latest version..?