Re: [squid-users] squid chroot jail no running copy error

From: Rick G. Kilgore <rgk@dont-contact.us>
Date: Wed, 25 Aug 2004 14:24:52 -0600

        I did try the chroot_directive today. Had trouble finding infomation on
sintax. Any way I tried to use it as I would the normal chroot command.
After startup squid was logging in old test directory not current prod dir.
        Is there some place I can get an example of how to set the chroot up
for squid. I have the squid binary and the config on a duplicate tree
where the chroot jail is.

Henrik Nordstrom wrote:
>
>
> On Fri, 20 Aug 2004, Rick G. Kilgore wrote:
>
>>> I'm not what you would call a Fedora pro, but I suspect you will need to
>>> chroot to the enviroment in order to run the squid -k reconfigure...
>>> E.g.
>>> chroot /wka usr/local/squidSTABLE6/sbin/squid -k reconfigure
>>
>>
>> That works, would have never thought that this would be necessary. Now
>> I have to know why. on a mission.
>
>
> Because you chroot:ed Squid when you started it, all paths opened by
> Squid is relative to the chroot, not the normal system root.
>
> If you do not chroot "squid -k ..." in the same manner "squid -k ..."
> runs in a different environment and won't find the correct paths to
> either your configuration file or the pid file as it's view is relative
> to the system root directory, not your chroot.
>
> Using the chroot_dir directive in squid.conf is generally adviseable
> over manual chrooting of Squid. This makes sure paths is always correct
> and also allows you to keep sensitive information such as the
> configuration file and Squid binary etc outside of the chroot.
>
> Regards
> Henrik
>

-- 
Hoy es: viernes julio veintedos  des miles y cuatro
fase del dia ----> coma esta usted --- how are you
This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information.  If you have
received it in error, please notify the sender immediately and delete 
the original.
Any other use of the email by you is prohibited.
Este mensaje esta' para el recipiente sen~alado solamente y puede contener 
la informacio'n privilegiada, propietaria, o de otra manera privada. Si 
usted lo ha recibido en error, notifique por favor el remitente 
inmediatamente y suprima la original. Cualquier otro uso del email de 
usted se prohi'be.
Rick G. Kilgore
State of Colorado Department of Revenue IT/CSTARS (DDP/CCR/RWOC)
E-Mail: rgk@valhall4.dor.state.co.us
Phone: (303) 205-5659
Fax: (303) 205-5715
Received on Wed Aug 25 2004 - 14:25:05 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Sep 01 2004 - 12:00:02 MDT