due to the way httpd.conf is generated, the perl scripts for the cpanel/whm/webmail aliases are executed as nobody
we like to ACL /usr/bin/perl so that nobody can not execute it, which stops pretty much every crappy /tmp perl script shenanigans
Doing that, breaks the cPanel redirects
We know we can edit a custom template like /var/cpanel/templates/apache2/main.local to make it do something like:
<VirtualHost [% vh %]>
ServerName [% servername %]
DocumentRoot [% serverroot %]/htdocs
ServerAdmin [% serveradmin %]
<IfModule !mod_disable_suexec.c>
SuexecUserGroup acluser acluser
</IfModule>
[%- IF supported.mod_suphp %]
<IfModule mod_suphp.c>
suPHP_UserGroup nobody nobody
</IfModule>
[%- END %]
[%- IF supported.mod_userdir && userdirprotect_enabled && defaultvhost.userdirprotect != '-1' %]
UserDir disable
[%- IF defaultvhost.userdirprotect != '' %]
UserDir enabled [% defaultvhost.userdirprotect %]
[%- END -%]
[%- END %]
</VirtualHost>
But it would be nice maybe if cPanel did this by default, and executed the internal perl scripts as some "cpanelperl" user or something



LinkBack URL
About LinkBacks
Reply With Quote




