Unix Chroot tech

Chroot is a Unix system call that is often used to provide an additional layer of security when untrusted programs are running.

The Kernel on Unix varients which support chroot maintain a note of the root directory each process on the system.

Generally is “/”, but this can change using chroot.

To change root directory of program /foo/bar, just run the following code lines:

chdir(“foo/bar”)

chroot(“foo/bar”)

———————————————————————————————————————————————-

The chroot prevents malicious programs from accessing the real root file system, providing an added measure of security

for the web server and Directory server processes that power Identity server.

Read Full Post »