Questions tagged [suexec]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
291 views

Does SuexecUserGroup work with Virtualhost in Apache 2.4

I'm trying to set up a virtualhost that uses CGI scripts that run as a particular user and group. I'm using the SuexecUserGroup directive, but that doesn't seem to work. Basic setup. User "Bob&...
Scott Anderson's user avatar
1 vote
1 answer
605 views

Apache 2.4 VHosts with FastCGI and suexec-custom

I have setup at my local machine Ubuntu 22.04 Apache 2.4 with suexec-custom. In fact, this setup was working from Ubuntu 16 up to this update to 22.04. I only load some modules, reload some other and ...
centurian's user avatar
  • 461
0 votes
1 answer
56 views

apache2 suexec destroy my day

I have a puzzle with http suEXEC now. It is a bit of frustration. Basically apache2 report weird lines in error.log [Fri Dec 18 11:29:57.385776 2020] [ssl:info] [pid 10944] AH01876: mod_ssl/2.4.38 ...
kantor's user avatar
  • 9
1 vote
1 answer
2k views

mod_fcgid: error reading data from FastCGI server / 500 Internal Server Error

I've trying to set up an IIPImage server but the Images won't display: https://oooledge.de/wisski_views/b719fd1ac3844863103c508912965b883443 First here are logs, configs, modules and permissions: ...
rnsrk's user avatar
  • 21
0 votes
0 answers
116 views

linux shared folder for all users php not working mod_hive suexec

Feel free to educate me - I'm migrating from a windows server to a dedicated linux server with apache 2.4 and centos 6.10 ... all users on the server are actually ME, so this part is not a security ...
KSechrist's user avatar
1 vote
0 answers
23 views

I restored a vhost under Webmin, now php script are executed as www-data

Under Webmin (Debian 8), I restored a vhost (without deleting the existing vhost), then I chose 'No' to the question "reallocate UID and GID", now the php scripts run as www-data, I would like the php ...
Yvon Huynh's user avatar
1 vote
1 answer
196 views

Suexec: invalid command error

I'm trying to set lighttpd with suexec, but something goes wrong on testing: when I try to launch something via suexec, it gives me in log: [2017-10-08 00:23:24]: invalid command (/srv/http/main/...
Fireburn's user avatar
0 votes
1 answer
1k views

suEXEC queries www-data when trying to execute a script as userXYZ

I am setting up a suexec environment with Apache2 and PHP 7.0 with FastCGI. I have installed everything the normal way Aptitude install libapache2-mod-fcgid apache2-suexec-custom A2enmod suexec My ...
Daniel Marschall's user avatar
5 votes
1 answer
730 views

Environment variables not available on server after mod_rewrite, but works locally

I am working on a site where I am using SSI to set a variable on an HTML page that gets parsed and the variable is then to be picked up by a script after a mod_rewrite rewrite. This works on my local ...
insaner's user avatar
  • 151
1 vote
1 answer
674 views

Apache RewriteRule for each User directory

I have two directories in each of my users' home folders: .html-data and .cgi-bin. The first one contains static (.html) files, the second one contains files for dynamic document generation. Each ...
acid_g's user avatar
  • 11
0 votes
1 answer
143 views

Can cgi scripts with permission 775 run under suEXEC?

We have suEXEC installed, and we also use git version control. suEXEC only allows cgi scripts to run with permission 755. Git sets file permissions on cgi scripts (and all executables) to 775. Is ...
Leo Galleguillos's user avatar
1 vote
0 answers
1k views

SuExec with Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm in Debian 8

I installed Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm and other things like Mysql 5.5, Phpmyadmin and munin, no problem. Note: I activated also userdir and rewrite. Now I want to have more ...
Rey's user avatar
  • 11
-2 votes
1 answer
56 views

Strange behaviour with linux permissions

Hopefully someone can help me out, my site isn`t working ATM due to an issue. I changed the apache MPM and for that I needed to change virtualmin to have it run as virtualserver owner (was the only ...
Marcel's user avatar
  • 119
0 votes
2 answers
575 views

vsftpd permissions for virtual users with Apache SUexec compatibility

I run a linux server with Apache + SUexec where all virtualhosts htdocs folder are owed by specific users : # ls /www/sites drwxr-xr-x 4 vhost-sitea.com vhost-sitea.com 4096 Oct 13 16:45 www....
Ken Addams's user avatar
1 vote
0 answers
708 views

apache suexec + php + fcgid does not log errors

Strangely my apache does not log errors anymore ever since I managed to enable fcgid and suexec for php processing. Even simple files with only <? dwakdnawjkdn(); ?> won't create any error, even ...
alex's user avatar
  • 417
1 vote
0 answers
2k views

FastCGI apache reload issue (suexec)

I am trying to setup a a django (mod-wsgi) app on a server on the subdomain accounts.mysite.com (D.O. Droplet). When I try to reload apache, I get the following errors: AH00526: Syntax error on line ...
user114253's user avatar
0 votes
1 answer
366 views

suexec AP_DOC_ROOT Path on gentoo

after a few years running php as mod_php I want to move to fcgi. On my server I run currently gentoo linux. I allready set up php als fcgi and everything is working. But there is one problem. I have ...
user39063's user avatar
  • 121
0 votes
1 answer
406 views

Why does Apache need o+x permissions for a Virtual Host running under suEXEC?

Running Apache 2.4.10 on Arch Linux. I'm trying to restrict an SFTP user to only be able to access his home directory, a public folder under a vhost directory, without being able to access that vhost ...
Hugh Guiney's user avatar
2 votes
1 answer
260 views

Suexec PHP does not load php.ini

I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows: #!/bin/sh PHPRC=/home/ben/etc/ export PHPRC export TMPDIR=/home/ben/tmp/ exec /usr/bin/php-cgi -c /home/ben/etc/...
Fynn's user avatar
  • 21
-1 votes
2 answers
1k views

How to sandbox a website subfolder?

Let's say I have a website under www.example.com and would like to also have a blog under a subfolder, e.g. www.example.com/blog/. How can I sandbox this folder, so that any script running inside it, ...
ovi's user avatar
  • 99
0 votes
1 answer
1k views

suEXEC is enabled but apache is still using "apache" user for every website [closed]

I'm using Plesk 12 with some modules enabled, including suexec: But when I run whoami from a PHP script, I still get apache's default user: apache What am I doing wrong? Should I double check some ...
dmmd's user avatar
  • 415
4 votes
3 answers
11k views

multiple mounts of same NFS share on one client?

I'm moving webspace content to NFSv3 shares. Because of suexec restrictions I have different paths to different subsets of the content on the client. I wonder if I can still have all of the content in ...
matthias's user avatar
0 votes
1 answer
2k views

Centos6 Apache configure SUEXEC wrapper

On a Centos 6 trying to upgrade to a specific apache version (from 2.2.24 to 2.2.25) from source since yum doesn't have the right version I need (or the very least I can't find the repo for it) and I ...
Maruf's user avatar
  • 159
3 votes
1 answer
20k views

Setting up Apache 2.2 + FastCGI + SuExec + PHP-FPM on Centos 6

I'm trying to follow this very detailed instruction here, I simply changed from www-data user to apache user, and is using /var/www/hosts/sitename/public_html instead of /home/user/public_html ...
mr1031011's user avatar
  • 215
1 vote
1 answer
1k views

Apache suEXEC execute script on user dir basis?

Iam looking for a way to run a script with different users. I dont want to hardcode the users in the config... and I found some information that it should be possible that the user goes to... lets say:...
nicondev's user avatar
  • 131
0 votes
1 answer
377 views

configuring awstats with suexec

I have a web server with more than 100 websites running apache and php as fcgid and suexec. I have configured awstats on my server(FreeBSD) following awstats installation on FreeBSD but when I try ...
pnanvuma's user avatar
1 vote
1 answer
1k views

trac: "Internal server error (500)" with mod_fcgid and mod_suexec

I try to setup Trac on a shared server with shell access, SW is Trac 1.0.1, Python 2.6.6, Apache 2.2.15 with mod_fcgid and mod_suexec. I've set it up following the instructions from the wiki of my ...
panne's user avatar
  • 21
2 votes
1 answer
2k views

PHP-FPM SuExecUserGroup not working

I have installed php, apache, and fastcgi_handler by: emerge dev-lang/php www-apache/mod_fastcgi_handler I managed to make it work by updating the relevant lines in /etc/apache2/modules.d/...
Stoked PHP Engineer's user avatar
0 votes
2 answers
10k views

Apache startup is failed

My server was terminated abnormally because power was turned off. After start server I can't to run Apache. $ /etc/init.d/httpd start Starting httpd: [...
alexBl's user avatar
  • 37
0 votes
1 answer
1k views

Configuring suExec to work with Apache and PHP via FastCGI

I have installed ISPConfig 3 on an Ubuntu VPS and configured it for Apache + PHP via FastCGI and suexec. I am able to upload PHP apps (e.g. Wordpress) and run them normally w/ suexec. However, for ...
Matt Hamann's user avatar
1 vote
1 answer
3k views

Errors getting apache working with fcgi and suexec

I have a Debian 6 server and I was previously using Apache with mod_php but decided to switch to using fcgi instead since Wordpress was somehow causing Apache to crash. I have the following in my site'...
Mike's user avatar
  • 689
1 vote
1 answer
510 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
asciiphil's user avatar
  • 3,136
1 vote
1 answer
317 views

apache+php-fpm and security in shared enviroment compared to apache+suexec+mod_fastcgi

I've been using Apache with suexec and mod_fastcgi. It starts up PHP handlers as the selected system user and listens to request via PIPES (fastcgi protocol). It works well but can't share opcode via ...
user172372's user avatar
1 vote
1 answer
1k views

Multiple VHosts with FastCGI and Suexec

I have a Debian virtual machine server which I have full control over, but I have someone who wants to host a single domain on it. This is obviously a security concern, as even if his particular user ...
bountiful's user avatar
  • 151
1 vote
2 answers
3k views

Can't Get New Instance Of RT To Start

I am trying to transplant an instance of RT 4.0.1 (with local code customization) from a CentOS 4 server to a CentOS 6 server. My problem appears to be that I can't get the fastcgi script to start. ...
David Mackintosh's user avatar
0 votes
2 answers
95 views

Modules to protect PHP and Perl from accessing other users file/data? [closed]

I've use to use a combination of suPHP with suExec in order to try to protect the users and limiting the PHP/Perl from running out of their allowed space (i.e.: user/tmp folders). Its been a while ...
Prix's user avatar
  • 5,081
0 votes
1 answer
573 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
Timo Kähkönen's user avatar
0 votes
1 answer
2k views

How to avoid '403 Forbidden' response in Apache with suEXEC enabled

I have configured an Apache 2.2 web server with suEXEC following a couple of tutorials after reading the official documentation. I'll put a short summary here: # Install and enable Apache, suEXEC, ...
elitalon's user avatar
  • 209
0 votes
3 answers
1k views

Preventing error_log flooding

Is there a way to have httpd/php stop logging errors if they are repeating over and over again to prevent flooding? Currently the /usr/local/apache/logs/error_log file is getting flooded and would ...
Tiffany Walker's user avatar
1 vote
1 answer
852 views

Mechanism behind user forwarding in ScriptAliasMatch

I am following this tutorial to setup gitolite and at some point the following ScriptAliasMatch is used: ScriptAliasMatch \ "(?x)^/(.*/(HEAD | \ info/refs | \ objects/(info/[^/]+ | \ [0-9a-f]{2}/[0-...
jolivier's user avatar
  • 141
1 vote
1 answer
608 views

How to download source, modify source, recompile and build .deb package?

I have to customize my Apache2 suExec module to ensure some special environment variables getting passed through suExec. How to download the source code form Debian package apache2-suexec, modify ...
burnersk's user avatar
  • 2,096
16 votes
2 answers
22k views

Multiple php versions simultaneously on Ubuntu

I want to be able to run multiple php versions on my development box running Ubuntu 12.04. What I want to accomplish is that when I use localhost as a domain a default is used (let's say php 5.3.17). ...
SeeDoubleYou's user avatar
-1 votes
1 answer
339 views

Files uploaded with php scripts are owned by apache on Directadmin [closed]

Uploaded files are owned by apache, I have DirectAdmin installed and also mod_suexec is loaded into Apache. So is there anyway to upload file with account owner under mod_php(php5_module)?
Zim3r's user avatar
  • 1,504
0 votes
3 answers
601 views

Apache - suExec - FastCGI - PHP = security issue

I installed Apache with FastCGI (mod_fastcgi), suExec and PHP on my local development box. Working perfectly, except one thing. Let's say I have two users: user1 - /home/user1/public_html user2 - /...
Jari V.'s user avatar
  • 13
4 votes
1 answer
1k views

Apache mass virtual hosting & suexec & fcgid

I followed Falco's tutorial and everything now works as expected for 2 users (e.g. john and alice) with their relevant directories (/var/www/john and /var/ww/alice). Now, I want to go to the next ...
centurian's user avatar
  • 461
1 vote
1 answer
430 views

suexec failing scriptalias without logs

I am trying to install gitolite 3 on a apache2 server. So I need to run a CGI script owned by git:git. My configuration for achieving this (based mainly on this) is: <VirtualHost myserver.com> ...
jolivier's user avatar
  • 141
1 vote
0 answers
148 views

suexec executes world writable php files and files owned by root. why?

I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
nazco's user avatar
  • 397
0 votes
2 answers
535 views

Apache with suexec, fcgid shows content from wrong vHost over ssl

I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec. Allmost everything works fine. I wrote a ...
chris's user avatar
  • 21
4 votes
4 answers
10k views

SuExec: “command not in docroot” Even Though It Is?

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 with SuExec PHP 5.4.4 (cli) via FastCGI My sites were all working fine earlier… I’m not sure when it happened because I noticed it over a week ...
Hugh Guiney's user avatar
7 votes
4 answers
19k views

How to change suexec root directory from "/var/www" to "/home"?

Hi I've installed suexec using on ubuntu 12.04: apt-get install apache2 apache2-suexec libapache2-mod-fcgid php5-cgi However when I run the following command: sudo /usr/lib/apache2/suexec -V I get ...
Oudin's user avatar
  • 341