324 reputation
12
bio website blog.foaa.de
location
age
visits member for 3 years, 4 months
seen 2 days ago

Nov
14
awarded  Yearling
Nov
13
answered Php Type - what is the difference?
Sep
10
revised Store profile image of all users into single directory or per subdirectory id?
added 334 characters in body
Sep
10
answered Store profile image of all users into single directory or per subdirectory id?
Sep
10
answered Apache default charset doesn't work
Aug
22
comment Launching FPM pool as superuser / reflecting root access
The point is, if you would be able to run FPM as root, any flaw in your app or FPM might compromise the whole system - even if you intend the user only to do specific things. Once root.. Another idea: You could build a minimal server application running as root (not via php-fpm but as a regular daemon) with a simple TCP/IP or unix socket API. Your app can talk to the server and execute defined commands / send defined modifications to files.
Aug
10
awarded  Editor
Aug
10
comment Is it Secure to Grant Apache User Ownership of Directories & Files for Wordpress
@MichaelKjörling: Yeah, thanks ;)
Aug
10
revised Is it Secure to Grant Apache User Ownership of Directories & Files for Wordpress
edited body
Aug
10
comment PHP pages working slow from time to time
Depends on which virtualization is used. In OpenVZ you might want to look into /proc/user_beancounters for numfile (see wiki.openvz.org/Proc/user_beancounters and wiki.openvz.org/UBC_parameter_units)
Jul
27
answered perl setting locale failing
Jun
28
answered Apache2-Prefork & FastCGI
Jun
27
comment How to secure Apache for shared hosting environment? (chrooting, avoid symlinking…)
I'd think so. However, if you are prepared to "go the extra mile", look into Linux security enhancements, such as SELinux, GRSecurity, Tomoyo and so on. With those, you can limit the user's access on a more precise level (read about MAC and RBAC to get the drift). Also you can strengthen your chroot.
Jun
27
answered PHP pages working slow from time to time
Jun
27
answered How to secure Apache for shared hosting environment? (chrooting, avoid symlinking…)
Jun
26
comment Is it Secure to Grant Apache User Ownership of Directories & Files for Wordpress
If you are setting up a single-website/-user system, mod_php is probably an acceptable solution (in terms of simplicity vs performance vs security). Depending on your Linux skills, a complete locked-down box (see above) would still be better, of course. However, securing a single app might be easier. My approach would be (besides patching, patching, patching) a robust WAF. If you need a starting point, try this: blogsecurity.net/wordpress/…
Jun
26
answered Is it Secure to Grant Apache User Ownership of Directories & Files for Wordpress
Jun
14
awarded  Teacher
Jun
14
answered Get the time spent by a process on Linux
Apr
13
answered Xen find VBD id for physical disks