I finally got round to solving my per-user chrooting issues by hacking suPHP to read the /etc/security/chroot.conf file if no global chroot is specified, allowing individual users to be chrooted....
So you're nearing the end of a project release schedule and decide to contract out the security services of a website auditing company specialising. You might call it release engineering, or project finalisation......
moreIn response to Debians security efforts to stop session stealing on shared-hosting servers, and after a few requests from concerned sysadmins, I've developed an application to clean the PHP session directory as an alternative to the cron job route....
more