Questions tagged [suexec]
The suexec tag has no usage guidance.
97
questions
4
votes
1
answer
2k
views
Confusion on SUEXEC and DOCROOT
I keep running into an issue with suexec where it says the cgi script is not in the docroot.
I get this error:
"[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)"
...
3
votes
1
answer
754
views
Suexec, group-writeable files
I am running an Apache server with Suexec. However, I get an internal server error if I try to execute a CGI script that is group-writeable (if I chmod g-w , the script runs fine)
However, I want the ...
1
vote
2
answers
2k
views
mod_vhost_alias + suEXEC: auto selecting uid/gid
I'm trying to configure Debian 6.0.4 for massive shared hosting with PHP5.
Packages apache2-mpm-worker libapache2-mod-fcgid apache2-suexec are installed.
I successfully loaded mod_vhost_alias and ...
0
votes
2
answers
1k
views
Apache 2.4 and SuExec configuration
If I want PHP and other scripts to run as their own user when accessed from a web browser, is this the right way to configure apache?
./configure --enable-so --enable-deflate --enable-expires
--...
0
votes
1
answer
401
views
PHP Permissions (chmod vs. suEXEC)
I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
1
vote
1
answer
808
views
Configuring Apache2/mpm-worker not to eat up all the server's RAM
Th server is running around 40 WordPress sites. Originally I'd set the server up using mod_php and mpm-prefork back when the server had 2GB of memory, and it was running comfortably well. Recently, ...
1
vote
1
answer
3k
views
Safest way to run bash script using PHP-FPM
I currently running a websever with Nginx+PHP-Fpm and each sites on its own username/GID. Then I have a bash script that I use to create new user along with other necessary stuffs. I know I can call a ...
3
votes
1
answer
2k
views
issue with with suexec command when i try to initialise virtualmin on a pc with webmin installed and working
I am trying to initialise Virtualmin. After installing it via Webmin->Module->new module installation screen.
This is the message that I am getting in Webmin:
The Suexec command on your system is ...
-3
votes
1
answer
221
views
How do you setup PHP to run as user as CGI?
Been trying lots of examples but nothing seems to be working. I don't wanna use yum/apt-get I want to do everything from source so I get a better understanding. Yum/apt-get just cheats the system and ...
1
vote
1
answer
380
views
Apache: change PHP suexec user/group per SSL client
I've got a server running several vhost sites, and was wondering if there could be a way to get some vhost PHPs executed under a different user/group depending on the client connecting to them. I ...
1
vote
1
answer
2k
views
PHP with suexec/fcgid
httpd.conf file:
LoadModule fcgid_module modules/mod_fcgid.so
AddHandler fcgid-script .php
FCGIWrapper /usr/local/php5 .php
# manual
MaxRequestsPerProcess 1000
FcgidMaxProcesses 200
...
-1
votes
1
answer
2k
views
Virtualmin clean install - Internal Server errors with PHP
I've just reinstalled my server's OS (Ubuntu 10.04 LTS) and installed Virtualmin using the install script (install.sh). Everything on the server is completely vanilla - the only thing I've done after ...
1
vote
2
answers
3k
views
Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)
I just setup my server with Apache, FastCGI, and PHP-FPM. My question is regarding the /cgi-bin/ folder: is it really necessary to have a /cgi-bin/php-fpm wrapper for every single virtualhost that ...
1
vote
1
answer
4k
views
suexec policy violation: What were these guys up to?
Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root.
I was looking at my error.log for an issue with a script and found a number ...
1
vote
2
answers
1k
views
PHP Include Always Fails
Apache HTTP Server 2.2.21 with VirtualHosts under SuExec
PHP 5.3.8 via fcgid
Arch Linux 2011.08.19
I am in the process of migrating from shared hosting to VPS. The code I had ran fine before the move ...
3
votes
2
answers
15k
views
Access Denied for PHP Files Only
Apache HTTP Server 2.2.21 with VirtualHosts under SuExec
PHP 5.3.8 via fcgid
Arch Linux 2011.08.19
I am getting 403 Access Denied errors from Apache any time I try to access a PHP file. HTML files ...
3
votes
1
answer
10k
views
NameVirtualHost 12.345.67.89:443 has no VirtualHosts after enabling and disabling suexec module
In the process of trying to enable suexec module I starting getting these warnings (when I restarted apache). I get them when suexec is enabled & disabled:
* Restarting web server apache2
[Wed ...
0
votes
1
answer
3k
views
How do I utilize suexec to allow a php script to run a linux command?
I would like to execute a php script in a browser that will in turn execute a single linux command and return its output. When I first decided to test this out I created this:
<?php
$command = "ls"...
9
votes
4
answers
33k
views
PHP fopen always fails with permission denied
I am in the process of migrating a couple of Wordpress blogs over to AWS and have run into an issue with file permissions that has successfully foiled me for the last couple of hours.
The simplest ...
2
votes
2
answers
2k
views
django + wsgi + suexec + userdir + apache?
I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like ...
0
votes
1
answer
1k
views
suEXEC before Apache dead
One of our Apache server went down. After the web server restarts, there is a red light on the server panel and we are contacting hardware vendor to investigate any potential hardware issue.
The ...
0
votes
1
answer
1k
views
Debian, Plesk and Nagios problems
I have a Debian 5 + Plesk 9.5.4 installation on my server, and just installed Nagios3 via apt-get.
I have set up a subdomain on my virtualhost, with cgi support in Plesk, and then copied any nagios ...
0
votes
1
answer
565
views
Apache w/ fcgid and suexec: second vhost returning 'Forbidden'
I have an Apache install set up with suExec and vhosts.. The original ("primary") vhost works fine, but I'm having some issues with a second one I've added; returning a 403 response.
Considering this ...
2
votes
1
answer
698
views
Secure Apache PHP vhost configuration
I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
4
votes
1
answer
3k
views
How do I run a PHP web application as a particular user and group on CentOS 5 with Apache?
I'm aware there are various different ways to do this but I'm not sure that the "best" way would be for my particular situation:
Each site should have its own user account (site user)
Virtual Hosts ...
1
vote
1
answer
321
views
ApacheHTTPD mod_suexec, safe_mode, open_basedir
as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec ...
1
vote
2
answers
1k
views
I need clarification on Apache2, MPM-Worker, FastCGI, PHP5-fpm, suEXEC?
My current configuration is:
Apache2 + MPM-Worker AND FastCGI + PHP5-fpm (PHP 5.3.2) ON Ubuntu 10.04 LTS
I have a single pool of 2-5 processes running as a different user from that of the default ...
1
vote
1
answer
1k
views
suexec error configuring mod_fastcgi with apache2.2.3 on centos
I've been following this blog post so that I can share APC opcode cache between PHP processes using FastCGI. Unfortunately I'm getting the following error when starting httpd:
Starting httpd: Syntax ...
1
vote
1
answer
300
views
Need advice in setting up server. fastCGI, suExec, speed, security, etc
I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
2
votes
1
answer
189
views
Why restricting Apache users from executing scripts?
When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous?
I understand that the users can traverse the whole file system and even see which additional users are ...
2
votes
3
answers
2k
views
fcgid, suexec, and userdir
I'm trying to set up per-user trac instances, using fcgid. The problem is that trac requires rw access to the trac instance, so I need the fcgi process to run under the respective user.
I have the ...
0
votes
2
answers
747
views
How to debug a leeching apache process?
I am running apache2 with mod-fcgid, suexec and SysCP. From time to time, the apache process gets stuck using 100% CPU on one core on my server. The apache is also unable to handle any additional ...
0
votes
1
answer
130
views
Creating users/groups via PHP
I'm creating an internal tool that needs a bit of cpanel/webmin type functionality, but this isn't a situation where I could use one of those
Right now I need to be able to create linux users, groups,...
1
vote
2
answers
3k
views
Single fastcgi/php-cgi server for multiple virtualhosts?
I'm currently hosting sites for clients using the following setup:
Apache 2.2.16
mod_fastcgi 2.4.7
php 5.3.3
Apache uses the worker MPM and serves PHP through a dynamic FastCGI config:
...
1
vote
2
answers
802
views
Running APC with suEXEC
Our servers are currently setup to run PHP as DSO with suEXEC enabled. Is it possible for us to install APC in this setup?
Servers are CentOS 5.2 running with WHM/cPanel
0
votes
2
answers
200
views
Forcing scripts on apache to run under different accounts to enhance security?
My client's website was recently defaced and they are seeking was to mitigate this risk. They have a dedicated server running apache and mod_php. The website consists of three separate php ...
1
vote
1
answer
2k
views
How to enable suexec for VPS using Plesk Panel?
I have tested on Plesk 9 and 10(preview version), but I couldn't find a way to enable suexec. The apache has loaded the suexec module, but it was not enabled. The OS is Centos 5.4. Any help will be ...
0
votes
1
answer
1k
views
Setting up Suexec on apache on Godaddy Virtual private hosting
I have recently purchased Godaddy VPS (Virtual Private Server) with their custom control panel and CentOS 5.4
From their control panel I am able to add domains to the server with their own user and ...
2
votes
2
answers
421
views
SuExec for Tomcat?
We're running a (cPanel/WHM based) server which contains mainly PHP applications. They are executed with the permissions of their owner with the suExec component of Apache.
We're looking into moving ...
2
votes
3
answers
2k
views
Security issues of running PHP scripts as the owner of the PHP file with suexec
I'm using suexec to ensure that PHP scripts (and other CGI/FastCGI apps) are run as the account holder associated with the relevant virtual host. This allows for securing each users' scripts from ...
1
vote
2
answers
11k
views
Apache + SuExec + php-fpm - how to set them up?
I wonder if there is a good guide on how to setup Apache + SuExec + php-fpm? I have a server which I am going to use several separate website. So, I need php to be run as site-owner user. As I can see,...
4
votes
2
answers
277
views
Configuring Apache for multiple clients
Last week I had a question here about suexec / suphp but I tried to accomplish too much. I'm going to narrow the scope a bit and try again.
I'd like to configure a LAMP server to host multiple ...
13
votes
1
answer
3k
views
Apache, suexec, PHP, suPHP
While I'm quite comfortable as a Linux user, my Linux Admin-fu is a bit weak. Thus, I'm here looking for guidance with a CentOS server I'm about to build.
I need to setup an Apache2 web server for a ...
1
vote
2
answers
2k
views
Apache error with suEXEC only
When I enable suEXEC by following the tutorial here, I am able to get PHP to run over Apache in cgi mode, but when I start trying to use suEXEC I get a 403, and the following error appears in the ...
2
votes
1
answer
5k
views
suexec and docroot problem
I've got a problem with running a FastCgiServer under apache2. When I define a virtual host with a static fcgi server configured, I get an error from suexec:
command not in docroot (/var/www-blah/...
2
votes
5
answers
213
views
How to run each site under a different user?
Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites.
How should I go about ...
2
votes
2
answers
431
views
Apache setup for multiple sites with common files
Just realised i posted this on stack overflow by mistake, so here it is in the correct place!
I have approx 50 sites that all use the exact same files other than CSS and IMAGES, i currently ...