Skip to main content
IBM  
Shop Support Downloads
IBM Home Products Consulting Industries News About IBM
IBM developerWorks : Security : Education - Tutorials
Securing your Web server
ZIPPDF (letter)PDF (A4)e-mail
Main menuSection menuFeedbackPreviousNext
4. Jailing your Web users
  


Copy any required system libraries page 8 of 13


Now dig up the list you created under Determining shared libraries and copy each one to /chroot/httpd/lib.


[root@thor root ]# cp /lib/libm.so.6 /chroot/httpd/lib/
[root@thor root ]# cp /lib/libcrypt.so.1 /chroot/httpd/lib/
[root@thor root ]# cp /lib/libexpat.so.0 /chroot/httpd/lib/
[root@thor root ]# cp /lib/libc.so.6 /chroot/httpd/lib/
[root@thor root ]# cp /lib/ld-linux.so.2 /chroot/httpd/lib/

Required shared libraries will vary from system to system depending on which options you compiled the server with. You'll also need the following system libraries for certain network functions and name resolution:


[root@thor root ]# cp /lib/libnss_compat* /chroot/httpd/lib/
[root@thor root ]# cp /lib/libnss_dns* /chroot/httpd/lib/
[root@thor root ]# cp /lib/libnss_files* /chroot/httpd/lib/

In addition to the above libraries, copy /etc/nsswitch.conf to /chroot/httpd/etc; it's required for name resolution.


Main menuSection menuFeedbackPreviousNext
Privacy Legal Contact