Web Servers General Talk - chroot vs. suexec of Apache Web Server

Author

chroot vs. suexec of Apache Web Server

unbending@hushmail.com

2004-01-19, 6:31 am

What is the difference between chrooting Apache and using the new
suexec? My understanding is that chroot basically forces the server to
use only the specified directories. Whereas suexec forces it to be
executed with more restricted permissions. Can the two be combined?
I'm asking this for an OpenBSD system with just a base install (no
window manager). If the two can't be combined, which is better
(security wise)?