Re: [squid-users] about chroot

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 12 May 2011 13:40:13 +1200

On 12/05/11 10:26, Carlos Manuel Trepeu Pupo wrote:
> I'm right now installing my Debian 6, next will be install Squid
> 3.1.12, so Amos, I suppose we are in peace, lol. I like to enhance my
> security with a chroot, but reading in internet the information it's
> no too much, only see this in all the comments:
>
> "if you use a HTTP port less than 1024 and try to reconfigure, you may
> get an error saying that Squid can not open the port."
>
> So I want to know if the effort will really worth, and how the hell I
> will reconfigure squid in chroot?

The default HTTP port is 3128 (outside the 0-1024 protected range).

We don't have much in the way of explanations on chroot in the wiki
docs. Improvements and extra details welcome:
   http://wiki.squid-cache.org/ConfigExamples/ChrootJail

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.12
   Beta testers wanted for 3.2.0.7 and 3.1.12.1
Received on Thu May 12 2011 - 01:40:19 MDT

This archive was generated by hypermail 2.2.0 : Thu May 12 2011 - 12:00:02 MDT