Tenon Intersystems Please see text links at bottom of page for navigation
Please see text links at bottom of page for navigation

Search tenon.com

Thanks to:

WebTen

Re: Migrate from WebTen to iTools?

To: webten@xxxxxxxxxxxxxxx
Subject: Re: Migrate from WebTen to iTools?
From: Robert Brandtjen <rob@xxxxxxxxxxxxxxxxxxx>
Date: Wed, 19 Jun 2002 09:55:16 -0500
On Wednesday 19 June 2002 12:03 am, you wrote:
> I'm not sure what you mean by "jail" processes.  Tenon's software takes
> special care to make sure that services such as web (Apache) and mail
> (Sendmail) run as users other than root to avoid serious breaches in
> security even if a hacker compromises either service.

Thats not the same thing - Jail uses a "chroot" config that, in Httpd, for 
instance, allows the running of cgi's under apache.apache, rather then 
user.user or worse still, root.root.

see here:
http://www.tldp.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap21sec167.html

In this scenario, httpd cannot even execute a script/binary outside a defined 
(hard coded during compiling) directory path, as well.
-- 
 Robert Brandtjen
 --------------------------------------
 Web Site Creation and Hosting Services
 Hostmaster@xxxxxxxxxxxxxxxxxxx
 www.prometheusmedia.com

<Prev in Thread] Current Thread [Next in Thread>

| Tenon Home | Products | Order | Contact Us | About Tenon | Register | Tech Support | Resources | Press Room | Mailing Lists |

Powered By iTools

Copyright©2003 Tenon Intersystems, 232 Anacapa Street, Suite 2A, Santa Barbara, CA 93101. All rights reserved.
Questions about our website - Contact: webmaster@tenon.com.


Tenon Home  Tenon Home  Tenon Home  Tenon Home Product Info  Tenon Ordering Contact About Register Support Resources Press Mailing Lists