From owner-freebsd-questions@FreeBSD.ORG  Sat Sep 18 16:42:29 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 76E4C16A4CF
	for <freebsd-questions@freebsd.org>;
	Sat, 18 Sep 2004 16:42:29 +0000 (GMT)
Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.198])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EC06343D46
	for <freebsd-questions@freebsd.org>;
	Sat, 18 Sep 2004 16:42:28 +0000 (GMT)
	(envelope-from subhro.kar@gmail.com)
Received: by mproxy.gmail.com with SMTP id v18so850603rnb
	for <freebsd-questions@freebsd.org>;
	Sat, 18 Sep 2004 09:42:23 -0700 (PDT)
Received: by 10.38.8.29 with SMTP id 29mr275508rnh;
        Sat, 18 Sep 2004 09:42:23 -0700 (PDT)
Received: by 10.38.206.15 with HTTP; Sat, 18 Sep 2004 09:42:23 -0700 (PDT)
Message-ID: <b2807d0404091809421aa89eda@mail.gmail.com>
Date: Sat, 18 Sep 2004 22:12:23 +0530
From: Subhro <subhro.kar@gmail.com>
To: Omer Faruk Sen <ofsen@enderunix.org>
In-Reply-To: <20040918053948.54719.qmail@istanbul.enderunix.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
References: <20040918053948.54719.qmail@istanbul.enderunix.org>
cc: freebsd-questions@freebsd.org
Subject: Re: apache chroot or FreeBSD jail ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Subhro <subhro.kar@gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Sep 2004 16:42:29 -0000

Jail is definitely a better option but again Jail is still not 100%
documented...neither it is tested well. So you would be inviting some
incompatibilities and possibly troubles if you go for jails. chroot
environments are pretty safe and can be relied upon

Regards
S.


On Sat, 18 Sep 2004 08:39:48 +0300, Omer Faruk Sen <ofsen@enderunix.org> wrote:
> Hi,
> 
> I am planning to restrict apache to a spesific directory. But I am not sure
> if to install apache in chroot env or making a FreeBSD jail install ( say
> /usr/jail/freebsd_jail_ip). Which one is recommended for better security ?
> 
> An artilcele in http://www.haught.org/freebsdapache.php says jail is better
> that just chroot environment. But I want to be sure to have your opinions
> about it and want be sure which one is better.
> 
> Regards,
> 
> -----------------------
> Omer Faruk Sen
> http://www.EnderUNIX.ORG
> Software Development Team @ Turkey
> http://www.Faruk.NET
> For Public key: http://www.enderunix.org/ofsen/ofsen.asc
> ********************************************************
> 
> First Turkish FreeBSD book is out! Go check it.
> Duydunuz mu! Turkiye'nin ilk FreeBSD kitabi cikti.
> http://www.acikkod.com/freebsd.php
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> 



-- 
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India