EasyApache MPMs which can run on different uid/gid/chroot/environment

[chrismfz]

What about supporting an MPM like
peruser, itk or php-fpm ? (officially at least :D )

I don't know all of their cons and pros, just their similarity.
I know they start workers with different uid/gid/chroot/environment.
(and different php.ini's for fpm for example).

It's a must for people who like ...security (and piece of mind).

And I don't know if it possible to benefit using CloudLinux with this kind of worker,
which LVE will not only limit php processes but httpd workers too (per user).

 

[cPanelTristan]

Hello chrismfz,

We have various existing feature requests on MPM ITK (this is currently a custom opt mod on our site at EasyApache Custom Modules), php-fpm and I'm uncertain about the peruser one (unless that's mod_ruid2). Here are the links to those 3 feature requests:

MPM ITK ==> http://forums.cpanel.net/f334/easyapache-mpm-itk-case-50762-a-214981.html
php-fpm ==> http://forums.cpanel.net/f145/case-...-manager-fpm-sapi-new-php-5-3-3-a-161210.html
mod_ruid2 ==> http://forums.cpanel.net/f145/case-52294-support-mod_ruid2-229432.html

Thanks!