EA4 and securing PHP processes

Hello,

Mod_Ruid2 is a default Apache module in EasyApache 4. However, it requires the DSO handler. The EasyApache 4 PHP packages include, but do not install, the DSO handler by default. To use the DSO handler, install the PHP package that you wish to use. For example, to install the PHP 5.6 package, run the following command:

Code:

yum install ea-php56-php

This is documented at:

PHP Handlers - EasyApache 4 - cPanel Documentation

Information on php.ini files with EasyApache 4 is available at:

The cPanel PHPRC PHP Patch for EasyApache 4 - EasyApache 4 - cPanel Documentation

In addition, here's an example of entries you can add in the /etc/apache2/conf.d/includes/pre_main_global.conf file when using suPHP to lock the loaded PHP version to the server's php.ini for that version:

Code:

<IfModule mod_suphp.c>
<Location />
suPHP_ConfigPath /opt/cpanel/ea-php54/root/etc/php.ini
suPHP_ConfigPath /opt/cpanel/ea-php55/root/etc/php.ini
suPHP_ConfigPath /opt/cpanel/ea-php56/root/etc/php.ini
suPHP_ConfigPath /opt/cpanel/ea-php70/root/etc/php.ini
suPHP_ConfigPath /opt/cpanel/ea-php71/root/etc/php.ini
</Location>
</IfModule>

Thank you.