Click to See Complete Forum and Search --> : Running Multiple httpd daemons under slack 8.1


zanery
07-24-2002, 10:26 AM
HI, I am running slackware 8.1 and running a game server for a company we are creating. I am in need of some desparate help! I need to be able to run separate httpd daemons for telnet, ftp and security reasons, with each httpd running as the users name and or own group, but also with its own IP. I cannot figure this out for the life of me. I need to get the primary IP to run as a game server, and webserver for the main company, and then have the separate client machine run as a different IP and also have his own folder.

Also I need this so when they do a top they will only see there own processes running and also when they telnet they cannot go anywhere except for the root folder that they will be given from us.


Please HELP!


been dazed and confused for weeks


zanery

element-x
07-24-2002, 11:25 AM
1. Configure Virtual Servers in httpd.conf
Bind multiple IP's to a single interface (eth0:0, eth0:1 and so on)

2. doing top, and only seeing their own processes...I just did this myself, I patched my 2.4.18 kernel with grsecurity (grsecurity.org). It allows you to restrict users like this, and add some other security related items to your kernel.

3. I wouldn't give them telnet access if you're worried about security, setup SSHD and you'll be on your way.

However, if you stick with telnet, stick them in a chroot jail, this isn't guaranteed to keep them from being curious and trying to get out of it though, and is also a pain because you have to copy the binaries which you want to allow them to run, to be in their chroot jail.


Hope this helps.

zanery
07-24-2002, 11:51 AM
will give the grsecurity a try for the top, and also will install the sshd - but exactly how do i create the binding address to eth0:0 etc. - do i need to create a rc.vhost and bind it to apache or rc.httpd?

thanks for the input : )