Thank you On Wed, Aug 19, 2009 at 3:49 PM, Henrik Nordstrom<henrik@xxxxxxxxxxxxxxxxxxx> wrote: > ons 2009-08-19 klockan 10:34 +0530 skrev Avinash Rao: >> A basic question. what is the use of installing squid in chroot, > > it's a security measure just in case there is a security vulnerability > in Squid which may lead to remote execution of code. Makes life a lot > harder for those trying to exploit any such vulnerability. > > Note: Squid isn't installed in a chroot, instead it's told to chroot > itself to a folder containing only the few things Squid need to access > while running. The Squid binary itself lives outside the chroot, but all > filesystem access is confined to the chroot folder and all extra > privileges is dropped down to the bare minimum. > > Regards > Henrik > >
