When you compile apache manualy, you can set a root dir, normaly we set
that to /www and /www is a seperate device(drive), then you can chroot
apache to that dir so that any cgi orphp scripts that cause problems are
locked to a seperate drive and directory.  Obviously this would requier
PHP and mysql, perl and apache all to be compiled with all dependancies to
run in /www as root.  Do you all think Im being overly secure?

Bryan
iceberg@nxco.com


gillhaa@ghost.whirlpool.com writes:
>Bryan McWhirt writes:
>> Ok, if I want Apache to run with php3 as a module with mysql and perl
>> support, what order should I make the pkgsrc files in.  Also is there a
>> way to get apache to compile chroot /www like I have it in linux?
>
>The ap-php3 package depends on apache, so it will "do the right thing"
>if you install it.  Then you can install the php3-mysql package, which
>will depend on the mysql-client automatically also.
>You might end up installing in this order:
>	apache
>	ap-php3
>	mysql-client
>	mysql-server
>	php3-mysql
>
>WRT the chroot to /www, I don't have any idea. :(  Are you talking
>chroot(2) or just using a different htdocs directory?  If you just
>want a different htdocs, you could just change all occurences of
>/usr/pkg/share/httpd in /usr/pkg/etc/httpd/httpd.conf to /www.
>
>-Andrew 
>-- 
>-----------------------------------------------------------------
>Andrew Gillham                            | NetBSD ist Affengeil.
>gillham@whirlpool.com                     | Nachts ist es kaelter
>I speak for myself, not for my employer.  | als draussen.