Questions tagged [suexec]

97 questions
3
votes
1 answer

NameVirtualHost 12.345.67.89:443 has no VirtualHosts after enabling and disabling suexec module

In the process of trying to enable suexec module I starting getting these warnings (when I restarted apache). I get them when suexec is enabled & disabled: * Restarting web server apache2 [Wed Oct 05 01:29:40 2011] [warn] NameVirtualHost…
starsinmypockets
  • 179
  • 3
  • 11
2
votes
5 answers

How to run each site under a different user?

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites. How should I go about implementing such a solution? (some pointers will do)
Tarnay Kálmán
  • 1,038
  • 1
  • 7
  • 19
2
votes
2 answers

Apache setup for multiple sites with common files

Just realised i posted this on stack overflow by mistake, so here it is in the correct place! I have approx 50 sites that all use the exact same files other than CSS and IMAGES, i currently duplicate the files each time i create a new site and…
icelizard
  • 732
  • 3
  • 10
  • 20
2
votes
1 answer

Suexec PHP does not load php.ini

I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows: #!/bin/sh PHPRC=/home/ben/etc/ export PHPRC export TMPDIR=/home/ben/tmp/ exec /usr/bin/php-cgi -c /home/ben/etc/php.ini The PHPRC variable is set and phpinfo…
Fynn
  • 21
  • 1
2
votes
1 answer

PHP-FPM SuExecUserGroup not working

I have installed php, apache, and fastcgi_handler by: emerge dev-lang/php www-apache/mod_fastcgi_handler I managed to make it work by updating the relevant lines in /etc/apache2/modules.d/70_mod_php5.conf to: # AddHandler application/x-httpd-php…
2
votes
2 answers

django + wsgi + suexec + userdir + apache?

I've got a django 1.1 website I want to run in wsgi (as that seems to be the recommended deployment on apache). I want it to run as the www user (apache is running as www-data). I would ideally like this to work out of http://hostname/~www/…
Jayen
  • 1,857
  • 4
  • 16
  • 28
2
votes
1 answer

Secure Apache PHP vhost configuration

I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops vhosts interfering with each other, but does not stop…
jsimmons
  • 123
  • 5
2
votes
1 answer

Why restricting Apache users from executing scripts?

When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous? I understand that the users can traverse the whole file system and even see which additional users are hosted on the machine; they can also read the…
Dor
  • 165
  • 1
  • 3
  • 12
2
votes
3 answers

fcgid, suexec, and userdir

I'm trying to set up per-user trac instances, using fcgid. The problem is that trac requires rw access to the trac instance, so I need the fcgi process to run under the respective user. I have the suexec, fcgid, and userdir Apache modules installed…
Martin v. Löwis
  • 580
  • 4
  • 15
2
votes
2 answers

SuExec for Tomcat?

We're running a (cPanel/WHM based) server which contains mainly PHP applications. They are executed with the permissions of their owner with the suExec component of Apache. We're looking into moving some of our core applications to Java, running in…
Bart van Heukelom
  • 1,199
  • 6
  • 21
  • 41
2
votes
3 answers

Security issues of running PHP scripts as the owner of the PHP file with suexec

I'm using suexec to ensure that PHP scripts (and other CGI/FastCGI apps) are run as the account holder associated with the relevant virtual host. This allows for securing each users' scripts from reading/writing by other users. However, it occurs…
thomasrutter
  • 2,527
  • 1
  • 25
  • 34
2
votes
1 answer

suexec and docroot problem

I've got a problem with running a FastCgiServer under apache2. When I define a virtual host with a static fcgi server configured, I get an error from suexec: command not in docroot (/var/www-blah/dispatcher.fcgi) Which is correct, because docroot…
viraptor
  • 1,296
  • 6
  • 21
  • 41
1
vote
1 answer

mod_fcgid: error reading data from FastCGI server / 500 Internal Server Error

I've trying to set up an IIPImage server but the Images won't display: https://oooledge.de/wisski_views/b719fd1ac3844863103c508912965b883443 First here are logs, configs, modules and permissions: suexec.log [2019-08-16 07:34:11]: uid: (10000/rnsrk)…
rnsrk
  • 21
  • 4
1
vote
0 answers

I restored a vhost under Webmin, now php script are executed as www-data

Under Webmin (Debian 8), I restored a vhost (without deleting the existing vhost), then I chose 'No' to the question "reallocate UID and GID", now the php scripts run as www-data, I would like the php script to be ran as the user of the vhost as it…
Yvon Huynh
  • 199
  • 1
  • 9
1
vote
1 answer

Suexec: invalid command error

I'm trying to set lighttpd with suexec, but something goes wrong on testing: when I try to launch something via suexec, it gives me in log: [2017-10-08 00:23:24]: invalid command (/srv/http/main/htdocs/cgi-bin/test.py) Output of suexec -V: -D…
Fireburn
  • 13
  • 4