Re: [9front] httpd minimal configuration

["planless.user9" <planless.user9@proton.me>]

Thank you very much for your fast and helpful reply.

I will look at the source code in that case, hoping to get a simple web server set up.

Are there concrete insecurities in the implementation of namespaces?


------- Original Message -------
hiro <23hiro@gmail.com> schrieb am Dienstag, 21. Juni 2022 um 14:31:


> the most important documentation that will be useful for you to
> understand namespaces in practice will be the man page: fork(2)
>
> rc supports "rfork" command, so you can test it all out in your shell
> interactively. grep for rfork in rc man page.
>
> On 6/21/22, hiro 23hiro@gmail.com wrote:
>
> > > My preference would be httpd, however I can't find any documentation for
> > > it
> > > apart from the man page
> >
> > that's as intended. if there is important stuff missing in the man
> > page, please send a patch.
> >
> > > expected in the web root. Is it possible to put static html pages
> > > directly
> > > in it, or is a cgi expected?
> >
> > httpd doesn't do cgi, only static html. feel free to read the code to
> > find the implementation details.
> >
> > > Is there perhaps a simple example that I missed
> > > in my search on the wiki, fqa and via search engine?
> >
> > no.
> >
> > > I haven't quite figured out namespaces yet either, but the default
> > > configuration under /lib/namespace.httpd doesn't look to me like it would
> > > be
> > > usable without customization. (This is probably me, but I can't place
> > > "/usr/mike/www" "/n/emelieother" and "/srv/alice" or find the users and
> > > directories in my base system).
> >
> > you are correct.
> >
> > namespaces on the highest level might be a neat concept, but our
> > implementation sadly doesn't include an overall system security
> > concept.
> >
> > > What would be the minimum namespace configuration needed to display a
> > > static
> > > page?
> >
> > sorry.
> >
> > > The namespace concept makes it safe to run both a web server and a mail
> > > server on one physical device, right?
> >
> > no, practically right now, just spawn another cpu server instead.
> > physical separation is safer than user or namespace separation.
> >
> > i'd trust the fileserver's user separation a bit more, so that's the
> > only place where i'd share ressources.