Does anyone know about the PHP SuExec option in the latest /scripts/easyapache?
I have a customer who has shown us an example of how php scripts running as user 'nobody', when creating and writing to files on their account, will be created as user and group 'nobody'. When that is done any other user on the server can access and modify those files!
We checked the option mentioned above when we ran the latest build apache routine, but we don't see that php is running with suexec.
I have looked in the /home/cpapachebuild/buildapache directory and I see a couple of files in there, one is named suexec.patch, and the other is suexec+php.patch. There is also another file called apache_1.3.27-php-suexec-patch.
Is there something we are supposed to do to get it working? If it was supposed to be installed when we ran /scripts/easyapache, is there a way we can tell if it has been installed? I looked in the apache.conf file and don't see anything in there. When looking at the contents of the patch files mentioned above it showed that there should be a file called suexec.c. I figured it would be called in the apache.conf file, but didn't see it.
We would like to get this working, if anyone knows how.
Thanks...



LinkBack URL
About LinkBacks
Reply With Quote






