Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [suexec]

The tag has no usage guidance.

0
votes
0answers
20 views

linux shared folder for all users php not working mod_hive suexec

Feel free to educate me - I'm migrating from a windows server to a dedicated linux server with apache 2.4 and centos 6.10 ... all users on the server are actually ME, so this part is not a security ...
1
vote
0answers
15 views

I restored a vhost under Webmin, now php script are executed as www-data

Under Webmin (Debian 8), I restored a vhost (without deleting the existing vhost), then I chose 'No' to the question "reallocate UID and GID", now the php scripts run as www-data, I would like the php ...
0
votes
0answers
124 views

Use suexec for mod_wsgi WSGIAuthUserScript directive

Here's my apache conf file for the site (editing out the PHP-FPM parts of it): <VirtualHost *:80> AddDefaultCharset utf-8 ServerAdmin ADMIN@DOMAIN.HERE ServerName localhost ...
1
vote
1answer
73 views

Suexec: invalid command error

I'm trying to set lighttpd with suexec, but something goes wrong on testing: when I try to launch something via suexec, it gives me in log: [2017-10-08 00:23:24]: invalid command (/srv/http/main/...
0
votes
1answer
287 views

suEXEC queries www-data when trying to execute a script as userXYZ

I am setting up a suexec environment with Apache2 and PHP 7.0 with FastCGI. I have installed everything the normal way Aptitude install libapache2-mod-fcgid apache2-suexec-custom A2enmod suexec My ...
5
votes
0answers
436 views

Environment variables not available on server after mod_rewrite, but works locally

I am working on a site where I am using SSI to set a variable on an HTML page that gets parsed and the variable is then to be picked up by a script after a mod_rewrite rewrite. This works on my local ...
1
vote
1answer
271 views

Apache RewriteRule for each User directory

I have two directories in each of my users' home folders: .html-data and .cgi-bin. The first one contains static (.html) files, the second one contains files for dynamic document generation. Each ...
0
votes
1answer
73 views

Can cgi scripts with permission 775 run under suEXEC?

We have suEXEC installed, and we also use git version control. suEXEC only allows cgi scripts to run with permission 755. Git sets file permissions on cgi scripts (and all executables) to 775. Is ...
1
vote
0answers
1k views

SuExec with Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm in Debian 8

I installed Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm and other things like Mysql 5.5, Phpmyadmin and munin, no problem. Note: I activated also userdir and rewrite. Now I want to have more ...
-2
votes
1answer
40 views

Strange behaviour with linux permissions

Hopefully someone can help me out, my site isn`t working ATM due to an issue. I changed the apache MPM and for that I needed to change virtualmin to have it run as virtualserver owner (was the only ...
0
votes
2answers
209 views

vsftpd permissions for virtual users with Apache SUexec compatibility

I run a linux server with Apache + SUexec where all virtualhosts htdocs folder are owed by specific users : # ls /www/sites drwxr-xr-x 4 vhost-sitea.com vhost-sitea.com 4096 Oct 13 16:45 www....
1
vote
0answers
384 views

apache suexec + php + fcgid does not log errors

Strangely my apache does not log errors anymore ever since I managed to enable fcgid and suexec for php processing. Even simple files with only <? dwakdnawjkdn(); ?> won't create any error, even ...
1
vote
0answers
1k views

FastCGI apache reload issue (suexec)

I am trying to setup a a django (mod-wsgi) app on a server on the subdomain accounts.mysite.com (D.O. Droplet). When I try to reload apache, I get the following errors: AH00526: Syntax error on line ...
0
votes
1answer
234 views

suexec AP_DOC_ROOT Path on gentoo

after a few years running php as mod_php I want to move to fcgi. On my server I run currently gentoo linux. I allready set up php als fcgi and everything is working. But there is one problem. I have ...
0
votes
1answer
273 views

Why does Apache need o+x permissions for a Virtual Host running under suEXEC?

Running Apache 2.4.10 on Arch Linux. I'm trying to restrict an SFTP user to only be able to access his home directory, a public folder under a vhost directory, without being able to access that vhost ...
2
votes
0answers
198 views

Suexec PHP does not load php.ini

I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows: #!/bin/sh PHPRC=/home/ben/etc/ export PHPRC export TMPDIR=/home/ben/tmp/ exec /usr/bin/php-cgi -c /home/ben/etc/...
-1
votes
2answers
761 views

How to sandbox a website subfolder?

Let's say I have a website under www.example.com and would like to also have a blog under a subfolder, e.g. www.example.com/blog/. How can I sandbox this folder, so that any script running inside it, ...
0
votes
1answer
845 views

suEXEC is enabled but apache is still using “apache” user for every website [closed]

I'm using Plesk 12 with some modules enabled, including suexec: But when I run whoami from a PHP script, I still get apache's default user: apache What am I doing wrong? Should I double check some ...
3
votes
3answers
6k views

multiple mounts of same NFS share on one client?

I'm moving webspace content to NFSv3 shares. Because of suexec restrictions I have different paths to different subsets of the content on the client. I wonder if I can still have all of the content in ...
0
votes
1answer
2k views

Centos6 Apache configure SUEXEC wrapper

On a Centos 6 trying to upgrade to a specific apache version (from 2.2.24 to 2.2.25) from source since yum doesn't have the right version I need (or the very least I can't find the repo for it) and I ...
2
votes
1answer
17k views

Setting up Apache 2.2 + FastCGI + SuExec + PHP-FPM on Centos 6

I'm trying to follow this very detailed instruction here, I simply changed from www-data user to apache user, and is using /var/www/hosts/sitename/public_html instead of /home/user/public_html ...
1
vote
1answer
841 views

Apache suEXEC execute script on user dir basis?

Iam looking for a way to run a script with different users. I dont want to hardcode the users in the config... and I found some information that it should be possible that the user goes to... lets say:...
0
votes
1answer
284 views

configuring awstats with suexec

I have a web server with more than 100 websites running apache and php as fcgid and suexec. I have configured awstats on my server(FreeBSD) following awstats installation on FreeBSD but when I try ...
1
vote
1answer
1k views

trac: “Internal server error (500)” with mod_fcgid and mod_suexec

I try to setup Trac on a shared server with shell access, SW is Trac 1.0.1, Python 2.6.6, Apache 2.2.15 with mod_fcgid and mod_suexec. I've set it up following the instructions from the wiki of my ...
1
vote
1answer
1k views

PHP-FPM SuExecUserGroup not working

I have installed php, apache, and fastcgi_handler by: emerge dev-lang/php www-apache/mod_fastcgi_handler I managed to make it work by updating the relevant lines in /etc/apache2/modules.d/...
0
votes
2answers
6k views

Apache startup is failed

My server was terminated abnormally because power was turned off. After start server I can't to run Apache. $ /etc/init.d/httpd start Starting httpd: [...
0
votes
1answer
817 views

Configuring suExec to work with Apache and PHP via FastCGI

I have installed ISPConfig 3 on an Ubuntu VPS and configured it for Apache + PHP via FastCGI and suexec. I am able to upload PHP apps (e.g. Wordpress) and run them normally w/ suexec. However, for ...
0
votes
1answer
2k views

Errors getting apache working with fcgi and suexec

I have a Debian 6 server and I was previously using Apache with mod_php but decided to switch to using fcgi instead since Wordpress was somehow causing Apache to crash. I have the following in my site'...
1
vote
1answer
406 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
1answer
224 views

apache+php-fpm and security in shared enviroment compared to apache+suexec+mod_fastcgi

I've been using Apache with suexec and mod_fastcgi. It starts up PHP handlers as the selected system user and listens to request via PIPES (fastcgi protocol). It works well but can't share opcode via ...
0
votes
1answer
1k views

Multiple VHosts with FastCGI and Suexec

I have a Debian virtual machine server which I have full control over, but I have someone who wants to host a single domain on it. This is obviously a security concern, as even if his particular user ...
1
vote
2answers
2k views

Can't Get New Instance Of RT To Start

I am trying to transplant an instance of RT 4.0.1 (with local code customization) from a CentOS 4 server to a CentOS 6 server. My problem appears to be that I can't get the fastcgi script to start. ...
0
votes
2answers
87 views

Modules to protect PHP and Perl from accessing other users file/data? [closed]

I've use to use a combination of suPHP with suExec in order to try to protect the users and limiting the PHP/Perl from running out of their allowed space (i.e.: user/tmp folders). Its been a while ...
0
votes
1answer
517 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
0
votes
1answer
2k views

How to avoid '403 Forbidden' response in Apache with suEXEC enabled

I have configured an Apache 2.2 web server with suEXEC following a couple of tutorials after reading the official documentation. I'll put a short summary here: # Install and enable Apache, suEXEC, ...
0
votes
3answers
442 views

Preventing error_log flooding

Is there a way to have httpd/php stop logging errors if they are repeating over and over again to prevent flooding? Currently the /usr/local/apache/logs/error_log file is getting flooded and would ...
1
vote
1answer
715 views

Mechanism behind user forwarding in ScriptAliasMatch

I am following this tutorial to setup gitolite and at some point the following ScriptAliasMatch is used: ScriptAliasMatch \ "(?x)^/(.*/(HEAD | \ info/refs | \ objects/(info/[^/]+ | \ [0-9a-f]{2}/[0-...
0
votes
1answer
499 views

How to download source, modify source, recompile and build .deb package?

I have to customize my Apache2 suExec module to ensure some special environment variables getting passed through suExec. How to download the source code form Debian package apache2-suexec, modify ...
16
votes
2answers
20k views

Multiple php versions simultaneously on Ubuntu

I want to be able to run multiple php versions on my development box running Ubuntu 12.04. What I want to accomplish is that when I use localhost as domain a default is used (let's say php 5.3.17). ...
-1
votes
1answer
299 views

Files uploaded with php scripts are owned by apache on Directadmin [closed]

Uploaded files are owned by apache, I have DirectAdmin installed and also mod_suexec is loaded into Apache. So is there anyway to upload file with account owner under mod_php(php5_module)?
0
votes
3answers
555 views

Apache - suExec - FastCGI - PHP = security issue

I installed Apache with FastCGI (mod_fastcgi), suExec and PHP on my local development box. Working perfectly, except one thing. Let's say I have two users: user1 - /home/user1/public_html user2 - /...
4
votes
1answer
1k views

Apache mass virtual hosting & suexec & fcgid

I followed Falco's tutorial and everything now works as expected for 2 users (e.g. john and alice) with their relevant directories (/var/www/john and /var/ww/alice). Now, I want to go to the next ...
1
vote
1answer
350 views

suexec failing scriptalias without logs

I am trying to install gitolite 3 on a apache2 server. So I need to run a CGI script owned by git:git. My configuration for achieving this (based mainly on this) is: <VirtualHost myserver.com> ...
1
vote
0answers
140 views

suexec executes world writable php files and files owned by root. why?

I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
0
votes
2answers
509 views

Apache with suexec, fcgid shows content from wrong vHost over ssl

I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec. Allmost everything works fine. I wrote a ...
2
votes
4answers
9k views

SuExec: “command not in docroot” Even Though It Is?

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 with SuExec PHP 5.4.4 (cli) via FastCGI My sites were all working fine earlier… I’m not sure when it happened because I noticed it over a week ...
6
votes
4answers
16k views

How to change suexec root directory from “/var/www” to “/home”?

Hi I've installed suexec using on ubuntu 12.04: apt-get install apache2 apache2-suexec libapache2-mod-fcgid php5-cgi However when I run the following command: sudo /usr/lib/apache2/suexec -V I get ...
3
votes
1answer
1k views

Confusion on SUEXEC and DOCROOT

I keep running into an issue with suexec where it says the cgi script is not in the docroot. I get this error: "[2012-05-21 04:53:02]: command not in docroot (/apps/dctools/www/cgi-bin/test.cgi)" ...
2
votes
1answer
528 views

Suexec, group-writeable files

I am running an Apache server with Suexec. However, I get an internal server error if I try to execute a CGI script that is group-writeable (if I chmod g-w , the script runs fine) However, I want the ...
1
vote
2answers
2k views

mod_vhost_alias + suEXEC: auto selecting uid/gid

I'm trying to configure Debian 6.0.4 for massive shared hosting with PHP5. Packages apache2-mpm-worker libapache2-mod-fcgid apache2-suexec are installed. I successfully loaded mod_vhost_alias and ...