Questions tagged [suexec]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

command not in docroot

I'm setting up a server but when I'm trying to config suexec it's returning this error [2022-05-21 17:10:53]: uid: (1004/scripts) gid: (1008/scripts) cmd: register.cgi [2022-05-21 17:10:53]: command ...
's user avatar
0 votes
1 answer
41 views

apache2 suexec destroy my day

I have a puzzle with http suEXEC now. It is a bit of frustration. Basically apache2 report weird lines in error.log [Fri Dec 18 11:29:57.385776 2020] [ssl:info] [pid 10944] AH01876: mod_ssl/2.4.38 ...
  • 9
1 vote
1 answer
2k views

mod_fcgid: error reading data from FastCGI server / 500 Internal Server Error

I've trying to set up an IIPImage server but the Images won't display: https://oooledge.de/wisski_views/b719fd1ac3844863103c508912965b883443 First here are logs, configs, modules and permissions: ...
  • 21
0 votes
0 answers
107 views

linux shared folder for all users php not working mod_hive suexec

Feel free to educate me - I'm migrating from a windows server to a dedicated linux server with apache 2.4 and centos 6.10 ... all users on the server are actually ME, so this part is not a security ...
1 vote
0 answers
17 views

I restored a vhost under Webmin, now php script are executed as www-data

Under Webmin (Debian 8), I restored a vhost (without deleting the existing vhost), then I chose 'No' to the question "reallocate UID and GID", now the php scripts run as www-data, I would like the php ...
1 vote
1 answer
149 views

Suexec: invalid command error

I'm trying to set lighttpd with suexec, but something goes wrong on testing: when I try to launch something via suexec, it gives me in log: [2017-10-08 00:23:24]: invalid command (/srv/http/main/...
0 votes
1 answer
824 views

suEXEC queries www-data when trying to execute a script as userXYZ

I am setting up a suexec environment with Apache2 and PHP 7.0 with FastCGI. I have installed everything the normal way Aptitude install libapache2-mod-fcgid apache2-suexec-custom A2enmod suexec My ...
5 votes
0 answers
619 views

Environment variables not available on server after mod_rewrite, but works locally

I am working on a site where I am using SSI to set a variable on an HTML page that gets parsed and the variable is then to be picked up by a script after a mod_rewrite rewrite. This works on my local ...
  • 151
1 vote
1 answer
570 views

Apache RewriteRule for each User directory

I have two directories in each of my users' home folders: .html-data and .cgi-bin. The first one contains static (.html) files, the second one contains files for dynamic document generation. Each ...
  • 11
0 votes
1 answer
106 views

Can cgi scripts with permission 775 run under suEXEC?

We have suEXEC installed, and we also use git version control. suEXEC only allows cgi scripts to run with permission 755. Git sets file permissions on cgi scripts (and all executables) to 775. Is ...
1 vote
0 answers
1k views

SuExec with Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm in Debian 8

I installed Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm and other things like Mysql 5.5, Phpmyadmin and munin, no problem. Note: I activated also userdir and rewrite. Now I want to have more ...
  • 11
-2 votes
1 answer
50 views

Strange behaviour with linux permissions

Hopefully someone can help me out, my site isn`t working ATM due to an issue. I changed the apache MPM and for that I needed to change virtualmin to have it run as virtualserver owner (was the only ...
  • 119
0 votes
2 answers
487 views

vsftpd permissions for virtual users with Apache SUexec compatibility

I run a linux server with Apache + SUexec where all virtualhosts htdocs folder are owed by specific users : # ls /www/sites drwxr-xr-x 4 vhost-sitea.com vhost-sitea.com 4096 Oct 13 16:45 www....
1 vote
0 answers
584 views

apache suexec + php + fcgid does not log errors

Strangely my apache does not log errors anymore ever since I managed to enable fcgid and suexec for php processing. Even simple files with only <? dwakdnawjkdn(); ?> won't create any error, even ...
  • 417
1 vote
0 answers
2k views

FastCGI apache reload issue (suexec)

I am trying to setup a a django (mod-wsgi) app on a server on the subdomain accounts.mysite.com (D.O. Droplet). When I try to reload apache, I get the following errors: AH00526: Syntax error on line ...
0 votes
1 answer
338 views

suexec AP_DOC_ROOT Path on gentoo

after a few years running php as mod_php I want to move to fcgi. On my server I run currently gentoo linux. I allready set up php als fcgi and everything is working. But there is one problem. I have ...
  • 121
0 votes
1 answer
363 views

Why does Apache need o+x permissions for a Virtual Host running under suEXEC?

Running Apache 2.4.10 on Arch Linux. I'm trying to restrict an SFTP user to only be able to access his home directory, a public folder under a vhost directory, without being able to access that vhost ...
2 votes
1 answer
242 views

Suexec PHP does not load php.ini

I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows: #!/bin/sh PHPRC=/home/ben/etc/ export PHPRC export TMPDIR=/home/ben/tmp/ exec /usr/bin/php-cgi -c /home/ben/etc/...
  • 21
-1 votes
2 answers
994 views

How to sandbox a website subfolder?

Let's say I have a website under www.example.com and would like to also have a blog under a subfolder, e.g. www.example.com/blog/. How can I sandbox this folder, so that any script running inside it, ...
  • 99
0 votes
1 answer
1k views

suEXEC is enabled but apache is still using "apache" user for every website [closed]

I'm using Plesk 12 with some modules enabled, including suexec: But when I run whoami from a PHP script, I still get apache's default user: apache What am I doing wrong? Should I double check some ...
  • 415
4 votes
3 answers
9k views

multiple mounts of same NFS share on one client?

I'm moving webspace content to NFSv3 shares. Because of suexec restrictions I have different paths to different subsets of the content on the client. I wonder if I can still have all of the content in ...
0 votes
1 answer
2k views

Centos6 Apache configure SUEXEC wrapper

On a Centos 6 trying to upgrade to a specific apache version (from 2.2.24 to 2.2.25) from source since yum doesn't have the right version I need (or the very least I can't find the repo for it) and I ...
  • 159
3 votes
1 answer
19k views

Setting up Apache 2.2 + FastCGI + SuExec + PHP-FPM on Centos 6

I'm trying to follow this very detailed instruction here, I simply changed from www-data user to apache user, and is using /var/www/hosts/sitename/public_html instead of /home/user/public_html ...
  • 215
1 vote
1 answer
1k views

Apache suEXEC execute script on user dir basis?

Iam looking for a way to run a script with different users. I dont want to hardcode the users in the config... and I found some information that it should be possible that the user goes to... lets say:...
  • 131
0 votes
1 answer
347 views

configuring awstats with suexec

I have a web server with more than 100 websites running apache and php as fcgid and suexec. I have configured awstats on my server(FreeBSD) following awstats installation on FreeBSD but when I try ...
1 vote
1 answer
1k views

trac: "Internal server error (500)" with mod_fcgid and mod_suexec

I try to setup Trac on a shared server with shell access, SW is Trac 1.0.1, Python 2.6.6, Apache 2.2.15 with mod_fcgid and mod_suexec. I've set it up following the instructions from the wiki of my ...
  • 21
2 votes
1 answer
2k views

PHP-FPM SuExecUserGroup not working

I have installed php, apache, and fastcgi_handler by: emerge dev-lang/php www-apache/mod_fastcgi_handler I managed to make it work by updating the relevant lines in /etc/apache2/modules.d/...
0 votes
2 answers
10k views

Apache startup is failed

My server was terminated abnormally because power was turned off. After start server I can't to run Apache. $ /etc/init.d/httpd start Starting httpd: [...
  • 37
0 votes
1 answer
960 views

Configuring suExec to work with Apache and PHP via FastCGI

I have installed ISPConfig 3 on an Ubuntu VPS and configured it for Apache + PHP via FastCGI and suexec. I am able to upload PHP apps (e.g. Wordpress) and run them normally w/ suexec. However, for ...
1 vote
1 answer
2k views

Errors getting apache working with fcgi and suexec

I have a Debian 6 server and I was previously using Apache with mod_php but decided to switch to using fcgi instead since Wordpress was somehow causing Apache to crash. I have the following in my site'...
  • 669
1 vote
1 answer
482 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
  • 3,036
1 vote
1 answer
278 views

apache+php-fpm and security in shared enviroment compared to apache+suexec+mod_fastcgi

I've been using Apache with suexec and mod_fastcgi. It starts up PHP handlers as the selected system user and listens to request via PIPES (fastcgi protocol). It works well but can't share opcode via ...
1 vote
1 answer
1k views

Multiple VHosts with FastCGI and Suexec

I have a Debian virtual machine server which I have full control over, but I have someone who wants to host a single domain on it. This is obviously a security concern, as even if his particular user ...
  • 151
1 vote
2 answers
2k views

Can't Get New Instance Of RT To Start

I am trying to transplant an instance of RT 4.0.1 (with local code customization) from a CentOS 4 server to a CentOS 6 server. My problem appears to be that I can't get the fastcgi script to start. ...
0 votes
2 answers
89 views

Modules to protect PHP and Perl from accessing other users file/data? [closed]

I've use to use a combination of suPHP with suExec in order to try to protect the users and limiting the PHP/Perl from running out of their allowed space (i.e.: user/tmp folders). Its been a while ...
  • 4,703
0 votes
1 answer
557 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
0 votes
1 answer
2k views

How to avoid '403 Forbidden' response in Apache with suEXEC enabled

I have configured an Apache 2.2 web server with suEXEC following a couple of tutorials after reading the official documentation. I'll put a short summary here: # Install and enable Apache, suEXEC, ...
  • 209
0 votes
3 answers
821 views

Preventing error_log flooding

Is there a way to have httpd/php stop logging errors if they are repeating over and over again to prevent flooding? Currently the /usr/local/apache/logs/error_log file is getting flooded and would ...
1 vote
1 answer
826 views

Mechanism behind user forwarding in ScriptAliasMatch

I am following this tutorial to setup gitolite and at some point the following ScriptAliasMatch is used: ScriptAliasMatch \ "(?x)^/(.*/(HEAD | \ info/refs | \ objects/(info/[^/]+ | \ [0-9a-f]{2}/[0-...
  • 141
1 vote
1 answer
569 views

How to download source, modify source, recompile and build .deb package?

I have to customize my Apache2 suExec module to ensure some special environment variables getting passed through suExec. How to download the source code form Debian package apache2-suexec, modify ...
  • 1,966
16 votes
2 answers
22k views

Multiple php versions simultaneously on Ubuntu

I want to be able to run multiple php versions on my development box running Ubuntu 12.04. What I want to accomplish is that when I use localhost as a domain a default is used (let's say php 5.3.17). ...
-1 votes
1 answer
329 views

Files uploaded with php scripts are owned by apache on Directadmin [closed]

Uploaded files are owned by apache, I have DirectAdmin installed and also mod_suexec is loaded into Apache. So is there anyway to upload file with account owner under mod_php(php5_module)?
  • 1,384
0 votes
3 answers
595 views

Apache - suExec - FastCGI - PHP = security issue

I installed Apache with FastCGI (mod_fastcgi), suExec and PHP on my local development box. Working perfectly, except one thing. Let's say I have two users: user1 - /home/user1/public_html user2 - /...
  • 13
4 votes
1 answer
1k views

Apache mass virtual hosting & suexec & fcgid

I followed Falco's tutorial and everything now works as expected for 2 users (e.g. john and alice) with their relevant directories (/var/www/john and /var/ww/alice). Now, I want to go to the next ...
  • 401
1 vote
1 answer
405 views

suexec failing scriptalias without logs

I am trying to install gitolite 3 on a apache2 server. So I need to run a CGI script owned by git:git. My configuration for achieving this (based mainly on this) is: <VirtualHost myserver.com> ...
  • 141
1 vote
0 answers
143 views

suexec executes world writable php files and files owned by root. why?

I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
  • 387
0 votes
2 answers
525 views

Apache with suexec, fcgid shows content from wrong vHost over ssl

I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec. Allmost everything works fine. I wrote a ...
  • 21
4 votes
4 answers
10k views

SuExec: “command not in docroot” Even Though It Is?

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 with SuExec PHP 5.4.4 (cli) via FastCGI My sites were all working fine earlier… I’m not sure when it happened because I noticed it over a week ...
6 votes
4 answers
18k views

How to change suexec root directory from "/var/www" to "/home"?

Hi I've installed suexec using on ubuntu 12.04: apt-get install apache2 apache2-suexec libapache2-mod-fcgid php5-cgi However when I run the following command: sudo /usr/lib/apache2/suexec -V I get ...
  • 331
4 votes
1 answer
2k views

Confusion on SUEXEC and DOCROOT

I keep running into an issue with suexec where it says the cgi script is not in the docroot. I get this error: "[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)" ...