Great Circle Associates Firewalls
(September 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: WWW - http - cgi_scripts
From: root <rootmail @ beast . brainlink . com>
Date: Sat, 16 Sep 1995 14:11:50 -0400 (edt)
To: long-morrow @ cs . yale . edu
Cc: cosborn @ bbn . com, jst10 @ octacon . co . uk, firewalls @ greatcircle . com
In-reply-to: <199509151400 . KAA20314 @ SPARKY . CF . CS . YALE . EDU>

On Fri, 15 Sep 1995 long-morrow @
 CS .
 YALE .
 EDU wrote:

> It can be a pain (you have to make sure that anything that CGI programs needs --
> shared libraries, perl interpreter and library modules -- exists within the 
> chroot()d hierarchy, but it should help to contain a CGI program gone haywire
> (or one that an external WWW user attempted to trick and hijack).
> 
> We run a number of CGI programs in a chroot()d environment.
> 
> - Morrow

	Would you mind sharing what you needed to move to the chrooted 
environment to make CGI work??

========= << raj >>  ==  http://www.brainlink.com/~frostbit/ ==============
                    frostbit @
 brainlink .
 com
 SYADMIN: BrainLINK System (718) 805-8868 // http://www.brainlink.com 
     GCS d++ H-- s+:+ !g p2 !au a- w+ v-* C++++ US++++ L++ P+++ E- N+ W--- 
     M-- po Y+ t-- 5+++ j++ tv b+++ e++ u+ h++ f+ r++ n+ y+  
============================================================================



References:
Indexed By Date Previous: Re: I wish Java would go away ...
From: Christian Wettergren <cwe @ Csli . Stanford . EDU>
Next: Re: External Client Access Policy
From: njb @ knoware . nl (Niels Bjergstrom)
Indexed By Thread Previous: Re: WWW - http - cgi_scripts
From: long-morrow @ CS . YALE . EDU
Next: Re: WWW - http - cgi_scripts
From: "Jim Carroll" <jcarroll @ wellspring . us . dg . com>

Google
 
Search Internet Search www.greatcircle.com