Questions tagged [suexec]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4 votes
1 answer
2k views

Confusion on SUEXEC and DOCROOT

I keep running into an issue with suexec where it says the cgi script is not in the docroot. I get this error: "[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)" ...
user770395's user avatar
3 votes
1 answer
754 views

Suexec, group-writeable files

I am running an Apache server with Suexec. However, I get an internal server error if I try to execute a CGI script that is group-writeable (if I chmod g-w , the script runs fine) However, I want the ...
Jeff's user avatar
  • 135
1 vote
2 answers
2k views

mod_vhost_alias + suEXEC: auto selecting uid/gid

I'm trying to configure Debian 6.0.4 for massive shared hosting with PHP5. Packages apache2-mpm-worker libapache2-mod-fcgid apache2-suexec are installed. I successfully loaded mod_vhost_alias and ...
Fabio's user avatar
  • 21
0 votes
2 answers
1k views

Apache 2.4 and SuExec configuration

If I want PHP and other scripts to run as their own user when accessed from a web browser, is this the right way to configure apache? ./configure --enable-so --enable-deflate --enable-expires --...
Tiffany Walker's user avatar
0 votes
1 answer
401 views

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
Trent Scott's user avatar
1 vote
1 answer
808 views

Configuring Apache2/mpm-worker not to eat up all the server's RAM

Th server is running around 40 WordPress sites. Originally I'd set the server up using mod_php and mpm-prefork back when the server had 2GB of memory, and it was running comfortably well. Recently, ...
Mortanis's user avatar
1 vote
1 answer
3k views

Safest way to run bash script using PHP-FPM

I currently running a websever with Nginx+PHP-Fpm and each sites on its own username/GID. Then I have a bash script that I use to create new user along with other necessary stuffs. I know I can call a ...
Sam W.'s user avatar
  • 41
3 votes
1 answer
2k views

issue with with suexec command when i try to initialise virtualmin on a pc with webmin installed and working

I am trying to initialise Virtualmin. After installing it via Webmin->Module->new module installation screen. This is the message that I am getting in Webmin: The Suexec command on your system is ...
Arvind's user avatar
  • 501
-3 votes
1 answer
221 views

How do you setup PHP to run as user as CGI?

Been trying lots of examples but nothing seems to be working. I don't wanna use yum/apt-get I want to do everything from source so I get a better understanding. Yum/apt-get just cheats the system and ...
Jane's user avatar
  • 13
1 vote
1 answer
380 views

Apache: change PHP suexec user/group per SSL client

I've got a server running several vhost sites, and was wondering if there could be a way to get some vhost PHPs executed under a different user/group depending on the client connecting to them. I ...
jarfil's user avatar
  • 11
1 vote
1 answer
2k views

PHP with suexec/fcgid

httpd.conf file: LoadModule fcgid_module modules/mod_fcgid.so AddHandler fcgid-script .php FCGIWrapper /usr/local/php5 .php # manual MaxRequestsPerProcess 1000 FcgidMaxProcesses 200 ...
Jane's user avatar
  • 13
-1 votes
1 answer
2k views

Virtualmin clean install - Internal Server errors with PHP

I've just reinstalled my server's OS (Ubuntu 10.04 LTS) and installed Virtualmin using the install script (install.sh). Everything on the server is completely vanilla - the only thing I've done after ...
melat0nin's user avatar
  • 261
1 vote
2 answers
3k views

Why the php-cgi wrapper script for php-fpm? (Using virtualhost and suexec.)

I just setup my server with Apache, FastCGI, and PHP-FPM. My question is regarding the /cgi-bin/ folder: is it really necessary to have a /cgi-bin/php-fpm wrapper for every single virtualhost that ...
Caleb Gray's user avatar
1 vote
1 answer
4k views

suexec policy violation: What were these guys up to?

Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root. I was looking at my error.log for an issue with a script and found a number ...
corvidnola's user avatar
1 vote
2 answers
1k views

PHP Include Always Fails

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am in the process of migrating from shared hosting to VPS. The code I had ran fine before the move ...
Hugh Guiney's user avatar
3 votes
2 answers
15k views

Access Denied for PHP Files Only

Apache HTTP Server 2.2.21 with VirtualHosts under SuExec PHP 5.3.8 via fcgid Arch Linux 2011.08.19 I am getting 403 Access Denied errors from Apache any time I try to access a PHP file. HTML files ...
Hugh Guiney's user avatar
3 votes
1 answer
10k views

NameVirtualHost 12.345.67.89:443 has no VirtualHosts after enabling and disabling suexec module

In the process of trying to enable suexec module I starting getting these warnings (when I restarted apache). I get them when suexec is enabled & disabled: * Restarting web server apache2 [Wed ...
starsinmypockets's user avatar
0 votes
1 answer
3k views

How do I utilize suexec to allow a php script to run a linux command?

I would like to execute a php script in a browser that will in turn execute a single linux command and return its output. When I first decided to test this out I created this: <?php $command = "ls"...
Kenneth Vogt's user avatar
9 votes
4 answers
33k views

PHP fopen always fails with permission denied

I am in the process of migrating a couple of Wordpress blogs over to AWS and have run into an issue with file permissions that has successfully foiled me for the last couple of hours. The simplest ...
Kevin Loney's user avatar
2 votes
2 answers
2k views

django + wsgi + suexec + userdir + apache?

I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like ...
Jayen's user avatar
  • 1,877
0 votes
1 answer
1k views

suEXEC before Apache dead

One of our Apache server went down. After the web server restarts, there is a red light on the server panel and we are contacting hardware vendor to investigate any potential hardware issue. The ...
ohho's user avatar
  • 1,025
0 votes
1 answer
1k views

Debian, Plesk and Nagios problems

I have a Debian 5 + Plesk 9.5.4 installation on my server, and just installed Nagios3 via apt-get. I have set up a subdomain on my virtualhost, with cgi support in Plesk, and then copied any nagios ...
Dmitri Sologoubenko's user avatar
0 votes
1 answer
565 views

Apache w/ fcgid and suexec: second vhost returning 'Forbidden'

I have an Apache install set up with suExec and vhosts.. The original ("primary") vhost works fine, but I'm having some issues with a second one I've added; returning a 403 response. Considering this ...
Morgon's user avatar
  • 203
2 votes
1 answer
698 views

Secure Apache PHP vhost configuration

I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
jsimmons's user avatar
  • 123
4 votes
1 answer
3k views

How do I run a PHP web application as a particular user and group on CentOS 5 with Apache?

I'm aware there are various different ways to do this but I'm not sure that the "best" way would be for my particular situation: Each site should have its own user account (site user) Virtual Hosts ...
prodigitalson's user avatar
1 vote
1 answer
321 views

ApacheHTTPD mod_suexec, safe_mode, open_basedir

as the Debian developers consider safe_mode (which will not make it into PHP6) and open_basedir inherently broken security measures, I wonder if they can be considered replaceable by mod_suexec ...
benjamin's user avatar
  • 187
1 vote
2 answers
1k views

I need clarification on Apache2, MPM-Worker, FastCGI, PHP5-fpm, suEXEC?

My current configuration is: Apache2 + MPM-Worker AND FastCGI + PHP5-fpm (PHP 5.3.2) ON Ubuntu 10.04 LTS I have a single pool of 2-5 processes running as a different user from that of the default ...
farinspace's user avatar
1 vote
1 answer
1k views

suexec error configuring mod_fastcgi with apache2.2.3 on centos

I've been following this blog post so that I can share APC opcode cache between PHP processes using FastCGI. Unfortunately I'm getting the following error when starting httpd: Starting httpd: Syntax ...
Jonathan Day's user avatar
1 vote
1 answer
300 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
lewisqic's user avatar
  • 181
2 votes
1 answer
189 views

Why restricting Apache users from executing scripts?

When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous? I understand that the users can traverse the whole file system and even see which additional users are ...
Dor's user avatar
  • 175
2 votes
3 answers
2k views

fcgid, suexec, and userdir

I'm trying to set up per-user trac instances, using fcgid. The problem is that trac requires rw access to the trac instance, so I need the fcgi process to run under the respective user. I have the ...
Martin v. Löwis's user avatar
0 votes
2 answers
747 views

How to debug a leeching apache process?

I am running apache2 with mod-fcgid, suexec and SysCP. From time to time, the apache process gets stuck using 100% CPU on one core on my server. The apache is also unable to handle any additional ...
Thomas's user avatar
  • 221
0 votes
1 answer
130 views

Creating users/groups via PHP

I'm creating an internal tool that needs a bit of cpanel/webmin type functionality, but this isn't a situation where I could use one of those Right now I need to be able to create linux users, groups,...
Lowgain's user avatar
  • 247
1 vote
2 answers
3k views

Single fastcgi/php-cgi server for multiple virtualhosts?

I'm currently hosting sites for clients using the following setup: Apache 2.2.16 mod_fastcgi 2.4.7 php 5.3.3 Apache uses the worker MPM and serves PHP through a dynamic FastCGI config: ...
hlidotbe's user avatar
  • 215
1 vote
2 answers
802 views

Running APC with suEXEC

Our servers are currently setup to run PHP as DSO with suEXEC enabled. Is it possible for us to install APC in this setup? Servers are CentOS 5.2 running with WHM/cPanel
robjmills's user avatar
  • 990
0 votes
2 answers
200 views

Forcing scripts on apache to run under different accounts to enhance security?

My client's website was recently defaced and they are seeking was to mitigate this risk. They have a dedicated server running apache and mod_php. The website consists of three separate php ...
Michelle's user avatar
  • 923
1 vote
1 answer
2k views

How to enable suexec for VPS using Plesk Panel?

I have tested on Plesk 9 and 10(preview version), but I couldn't find a way to enable suexec. The apache has loaded the suexec module, but it was not enabled. The OS is Centos 5.4. Any help will be ...
garconcn's user avatar
  • 2,418
0 votes
1 answer
1k views

Setting up Suexec on apache on Godaddy Virtual private hosting

I have recently purchased Godaddy VPS (Virtual Private Server) with their custom control panel and CentOS 5.4 From their control panel I am able to add domains to the server with their own user and ...
user avatar
2 votes
2 answers
421 views

SuExec for Tomcat?

We're running a (cPanel/WHM based) server which contains mainly PHP applications. They are executed with the permissions of their owner with the suExec component of Apache. We're looking into moving ...
Bart van Heukelom's user avatar
2 votes
3 answers
2k views

Security issues of running PHP scripts as the owner of the PHP file with suexec

I'm using suexec to ensure that PHP scripts (and other CGI/FastCGI apps) are run as the account holder associated with the relevant virtual host. This allows for securing each users' scripts from ...
thomasrutter's user avatar
  • 2,577
1 vote
2 answers
11k views

Apache + SuExec + php-fpm - how to set them up?

I wonder if there is a good guide on how to setup Apache + SuExec + php-fpm? I have a server which I am going to use several separate website. So, I need php to be run as site-owner user. As I can see,...
Vladislav Rastrusny's user avatar
4 votes
2 answers
277 views

Configuring Apache for multiple clients

Last week I had a question here about suexec / suphp but I tried to accomplish too much. I'm going to narrow the scope a bit and try again. I'd like to configure a LAMP server to host multiple ...
Chris_K's user avatar
  • 3,434
13 votes
1 answer
3k views

Apache, suexec, PHP, suPHP

While I'm quite comfortable as a Linux user, my Linux Admin-fu is a bit weak. Thus, I'm here looking for guidance with a CentOS server I'm about to build. I need to setup an Apache2 web server for a ...
Chris_K's user avatar
  • 3,434
1 vote
2 answers
2k views

Apache error with suEXEC only

When I enable suEXEC by following the tutorial here, I am able to get PHP to run over Apache in cgi mode, but when I start trying to use suEXEC I get a 403, and the following error appears in the ...
Iiridayn's user avatar
  • 314
2 votes
1 answer
5k views

suexec and docroot problem

I've got a problem with running a FastCgiServer under apache2. When I define a virtual host with a static fcgi server configured, I get an error from suexec: command not in docroot (/var/www-blah/...
viraptor's user avatar
  • 1,306
2 votes
5 answers
213 views

How to run each site under a different user?

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites. How should I go about ...
Tarnay Kálmán's user avatar
2 votes
2 answers
431 views

Apache setup for multiple sites with common files

Just realised i posted this on stack overflow by mistake, so here it is in the correct place! I have approx 50 sites that all use the exact same files other than CSS and IMAGES, i currently ...
icelizard's user avatar
  • 732

1
2