Sandbox apache (httpd) for better security.
2014-03-26
120 words
1 min read
Apache/httpd is something which you would like to have contained. And now fedora provides a native way/mechanism to to so with virt-sandbox-service. With this, you can create a virtualized sanbox service and then connect/list/manage such with virsh.
We will be using LXC.
Basically its couple of commands and you have a contained service running.
# List all the containers virsh -c lxc:/// list # Create the sandbox, all default parameters. Will take dhcp address. virt-sandbox-service create -C --username amitag -u httpd.service httpd_conta # Create the container with static IP. virt-sandbox-service create -C --username amitag -u httpd.service -N \ address=192.168.122.11/24%192.168.122.255 httpd_conta#Enable and start the service. virt-sandbox-service start httpd_conta virt-sandbox-service enable httpd_conta#Delete the container if not required any more. virt-sandbox-service delete httpd_conta
Related Articles:
- 2014/03/19 Sandbox Firefox – First step to security
- 2010/06/04 Security — Installing and monitoring snort logs.
- 2013/11/08 Change display manager on Fedora
- 2013/08/23 pkgwat -search packages for Fedora.
- 2013/08/20 power save mode for battery in Fedora 19.
Authored By Amit Agarwal
Amit Agarwal, Linux and Photography are my hobbies.Creative Commons Attribution 4.0 International License.