Chrooting Apache and Jrun/CF
A great article over at Linux.com describes the steps to set up Apache using chroot, a way to set up a mini filesystem within your linux file tree structure separate from your other files. This is in case you get cracked through the apache user, the cracker is still in “chroot jail” meaning they can’t see the rest of the file system to then try to escalate their privileges.
It should also be possible to install Jrun / ColdFusion in this situation, as long as Apache and Jrun folders were both in the root chroot folder (such as /chroot mentioned in the article). After chroot and Apache are set up using the instructions above, just use the apache user as the runtime user for jrun, and install all files within the /chroot folder. This would also mean you wouldn’t have to implement the ColdFusion sandbox security, because the system would handle a lot of that for you.
When I figure out all the steps, I’ll post an update here.