Httpd gechroot in OpenBSD

Theo de Raadt poste op de openbsd-misc mailing list dat httpd voortaan standaard gechroot in /var/www.
Dit heeft als gevolg dat alle soorten ongewilde eigenschappen niet meer werken.

[quote]**********************************
To: misc@cvs.openbsd.org
Subject: httpd changes
From: Theo de Raadt
Date: Tue‚ 09 Jul 2002 15:19:07 -0600
——————————————————————————–

httpd by default now chroot’s into /var/www.

This causes all sorts of fancy features to break. Fancy features which
we believe to be quite unsafe.

If you don’t like this behaviour‚ use the -u flag for httpd_flags in
/etc/rc.conf to get back to the way it used to be. We bet that when
the next bug in apache comes‚ you’ll regret it though.

This is the best approach we can currently take against such a
monolothic piece of software with such bad behaviours. It is just too
big to audit‚ so for simple usage‚ we are constraining it to within
that jail.

When you turn the -u flag on and off‚ no other configuration changes
are needed.

All this is documented.

Good luck.
[/quote]

Voor meer informatie hierover lees de volgende [url=http://www.sigmasoft.com/~openbsd/archive/openbsd-misc/200207/threads.html#00639]Thread[/url]