RE: Chroot jails

["Craig Wright" <cwright () bdosyd com au>]

Hi
 
Like everything - they have been broken at one time or another, patch issues as they arrise and this will cover most 
things. A Good implementation will help further.
 
People find overflows in code from time to time, we have to patch from time to time - this does not mean to not do 
this, just like everything else... vigilance is the key
 
Craig

        -----Original Message----- 
        From: JamesHorwath () glic com [mailto:JamesHorwath () glic com] 
        Sent: Wed 21/09/2005 3:29 AM 
        To: Steve.Cummings () barclayscapital com 
        Cc: pentest () securityfocus com; webappsec () securityfocus com 
        Subject: Re: Chroot jails
        
        
Steve,

Use mod_security by Ivan Ristic, you can setup a chroot jail painlessly in
minutes.  On the small implementations I used momd_security I didn't find
it any harder to manage.

Regards,
Jim

Jim Horwath
SANS Certified: GCUX, GCIH, GHTQ
Unix Admin


<Steve.Cummings () barclayscapital com> wrote on 09/20/2005 12:21:02 PM:

> Hi All
>
> Wondered if people could give me their opinions on chroot jails on
> solaris and linux, am interested in both manageability but more
> interested in whether anyone has broken out of one