any idea??

thanks in advance

[error] NSS_Initialize failed. Certificate database: /etc/httpd/alias.
[error] SSL Library Error: -8038 SEC_ERROR_NOT_INITIALIZED

Help!

Just want to ask, in the chroot directories why the httpd.conf file is not included i.e. the “/etc/httpd” directory, as that is also one of the important configuration directory which can be hacked or modified. Whether that is required ? What is the reason of not including that ?

Regards
Pankaj

I have using slackware linux 13.1 64bit, I have already installed the apache below path( /usr/loca/apache2). Now I have install the mod_xslt2 module in apahce. while install the
moudle I am getting below error. Please help me how to fix this issue.

../configure –with-sapi=apache2
configure: * Trying with: ‘apache2′
checking for apxs2… no
checking for /usr/sbin/apxs2… no
checking for /usr/bin/apxs2… no
checking for /usr/local/bin/apxs2… no
checking for /usr/local/apache/bin/apxs2… no
checking for apxs… /usr/sbin/apxs
configure: WARNING:
* Apache has been compiled with a different compiler than the specified (or detected) one!
* I will use the same compiler as used by apache: ‘x86_64-slackware-linux-gcc’
* I’m also assuming ‘x86_64-slackware-linux-gcc’ is ISO C and POSIX compliant.
checking for apr-config… no
configure: error: apache2: couldn’t find a valid ‘apr-config’. Please use –with-apr-config.

Mike

Thanks in advance, but is there any links/tips how to install it as you said, other than Vivek thread?

Just an update that you may want to mention at the start of this post. As of apache 2.2.10 chroot is now included in the Apache MPM Common Directives – http://httpd.apache.org/docs/2.2/mod/mpm_common.html#chrootdir

Meaning it does not have to be compliled and installed. You just have to declare the ChrootDir directive in the httpd.conf

ChrootDir /path_to_chroot_jail

Still comes with all the normal chroot pains though.

Everything seems to work fine, am using CentOS 5.5 Finnal with Webmin, as am newbie with chrooting apache here but i have 1 simple question, how could we now add websites under webmin after this chroot apache completely works, and does this thread works fine with mySQL databases after chrooting ?

Thanks a bunch!

no it dos not i just have this problem now. and it kinda sucks.

Everything seems to work fine, am using CentOS 5.5 Finnal with Webmin, as am newbie with chrooting apache here but i have 1 simple question, how could we now add websites under webmin after this chroot apache completely works, and does this thread works fine with mySQL databases after chrooting ?

Thanks a bunch!

[notice] mod_chroot: changed root to /httpjail.
[emerg] (2) No such file or directory: mod_fcgid: Can’t create share memory for size %zu byte

Any ideas how to fix this?

on chrooted fedora 13, using php’s 5.3.3 function date, getting the following error:

Warning: date(): It is not safe to rely on the system’s timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected ‘UTC’ for ‘GMT/0.0/no DST’ instead in /var/www/html/index.php on line 6 Fatal error: date(): Timezone database is corrupt – this should *never* happen! in /var/www/html/index.php on line 6

if i have (or not) defined date.timezone, it ALWAYS returns same error.

if apache is not chrooted, it works fine.

please, please, please, please help……….

yum install httpd-devel

/chroot

I have created:

/chroot/httpdjail/

But wanted to put other servers folders in their like the area for ftp access (not the actual server just to make it as secure as humanly possible), is this the best way?

Just wanted to have a sort of directory that had:

/chroot/httpdjail/
/chroot/ftpjail/
etc

Is this a wise approach or would I have to go for:

/httpdjail/
/ftpjail etc?

Just seems logical to me to have all jailed services in one mount point.

Any advice given would be brilliant thanks.

Jeremy.

I also received the following errors in the apache error logs and it happened two times causing apache to fail

[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [emerg] (43)Identifier removed: couldn’t grab the accept mutex
[Mon Apr 20 00:20:02 2009] [alert] Child 13096 returned a Fatal error…\nApache is exiting!
exclog: signal received 15

While digging through some forums i noticed the cause can probably due to extra swap alloted. Can someone throw some light on it?

in my vhost.conf:

DocumentRoot /home/httpd/.sklep/http points into the httpdjailroot/home….
but
ErrorLog point into the main / not into the httpjail ?????

I have it figured out. You cannot use mod_chroot with apache-2.2.10. Apache-2.2.10 has built in chroot handling now. All you need to do is provide a ChrootDir variable in httpd.conf. The problem is that mod_chroot sets that value as well, I think it was trying to do a “double” chroot. Removing the -D chroot flag from apache startup options and configuring the variable got the server to start, and I verified that the chroot jail was working.

hanji

I do not have SELInux enabled. I agree, it seems like there is a problem with apache-2.2.10 and above with mod_chroot.

hanji