Skip to main content
IBM  
Shop Support Downloads
IBM Home Products Consulting Industries News About IBM
IBM developerWorks : Security : Education - Tutorials
Securing your Web server
ZIPPDF (letter)PDF (A4)e-mail
Main menuSection menuFeedbackPreviousNext
4. Jailing your Web users
  


Completing the configuration process page 11 of 13


The following steps complete the configuration process:

  • Copy the /etc/localtime file to /chroot/httpd/etc. This ensures Apache's log entries are written with regard to the local timezone.
  • Be sure you have a current backup of your previous Apache installation, and then remove the old data/configuration files from /var/log/httpd, /etc/httpd, and /home/httpd (or whatever your previous DocumentRoot was), and delete the old httpd binary (under a default Red Hat installation, this file is typically /usr/sbin/httpd).
  • Edit the /etc/rc.d/init.d/syslog script. Locate the line that reads daemon syslogd -m 0 and change it to daemon syslogd -m 0 -a /chroot/httpd/dev/log.
  • Edit the /etc/rc.d/init.d/apache script to account for the new location of the httpd binary. Change the entry daemon httpd to /usr/sbin/chroot /chroot/httpd/ /usr/sbin/httpd (append -DSSL to this line if your server is configured to support SSL). Also, change the entry rm -f /var/run/httpd.pid to rm -f /chroot/httpd/var/run/httpd.pid.

Main menuSection menuFeedbackPreviousNext
Privacy Legal Contact