How to Compare two easy apache configurations or where I can get info about the conf.yaml parameters

ITGabs

Well-Known Member
Jul 30, 2013
81
0
6
cPanel Access Level
Root Administrator
Hi,

I am having multiple issues in different configurations behaviors and I am comparing the Yaml of two different configurations.

For example the first one in easyapache with suPHP 5.4.x that I thought was safe, can execute images as php like example.php.jpg and overwriting the php.ini defaults in every different folder
Code:
Apache: 
  optmods: 
    Access: 0
    Actions: 0
    Alias: 0
    Asis: 0
    AuthzHost: 0
    AuthzOwner: 0
    Autoindex: 0
    Bucketeer: 0
    Cache: 0
    CaseFilter: 0
    CaseFilterIn: 0
    CernMeta: 0
    CharsetLite: 0
    DAVFs: 0
    DAVLock: 0
    DBD: 0
    DIR: 0
    Dav: 0
    Deflate: 0
    DiskCache: 0
    Distcache: 0
    Dumpio: 0
    Echo: 0
    Env: 0
    Expires: 1
    ExtFilter: 0
    Fastcgi: 0
    FileCache: 0
    Fileprotect: 1
    Frontpage: 1
    Headers: 1
    Ident: 0
    Imagemap: 0
    LDAP: 0
    LogAgent: 0
    LogConfig: 0
    LogForensic: 0
    LogReferer: 0
    MPMEvent: 0
    MPMLeader: 0
    MPMPerchild: 0
    MPMPrefork: 0
    MPMThreadpool: 0
    MPMWorker: 0
    MemCache: 0
    Mime: 0
    MimeMagic: 0
    MmapStatic: 0
    Negotiation: 0
    OptionalFnExport: 0
    OptionalFnImport: 0
    OptionalHookExport: 0
    OptionalHookImport: 0
    PHPAsUser: 1
    Proxy: 1
    RaiseFDSetsize: 0
    RaiseHardServerLimit: 0
    Rewrite: 1
    Setenvif: 0
    Speling: 0
    Status: 0
    SymlinkProtection: 0
    UniqueId: 0
    Userdir: 0
    Usertrack: 0
    Version: 0
    VhostAlias: 0
    Watchdog: 0
  version: 2_2
Cpanel::Easy::ModGzip: 0
Cpanel::Easy::ModPerl: 0
Cpanel::Easy::PHP5: 1
Cpanel::Easy::PHP5::2_17: 0
Cpanel::Easy::PHP5::2_9: 0
Cpanel::Easy::PHP5::3_26: 0
Cpanel::Easy::PHP5::3_27: 0
Cpanel::Easy::PHP5::4_20: 1
Cpanel::Easy::PHP5::Bcmath: 1
Cpanel::Easy::PHP5::Bz2: 0
Cpanel::Easy::PHP5::CGI: 0
Cpanel::Easy::PHP5::Calendar: 1
Cpanel::Easy::PHP5::Curl: 0
Cpanel::Easy::PHP5::CurlSSL: 1
Cpanel::Easy::PHP5::Curlwrappers: 0
Cpanel::Easy::PHP5::DBX: 0
Cpanel::Easy::PHP5::Dbase: 0
Cpanel::Easy::PHP5::DiscardPath: 0
Cpanel::Easy::PHP5::Exif: 0
Cpanel::Easy::PHP5::FTP: 1
Cpanel::Easy::PHP5::Fastcgi: 0
Cpanel::Easy::PHP5::ForceCGIRedirect: 1
Cpanel::Easy::PHP5::GD: 0
Cpanel::Easy::PHP5::Gettext: 0
Cpanel::Easy::PHP5::Iconv: 0
Cpanel::Easy::PHP5::Imap: 1
Cpanel::Easy::PHP5::Java: 0
Cpanel::Easy::PHP5::MM: 0
Cpanel::Easy::PHP5::MagicQuotes: 1
Cpanel::Easy::PHP5::MailHeaders: 1
Cpanel::Easy::PHP5::Mbregex: 0
Cpanel::Easy::PHP5::Mbstring: 0
Cpanel::Easy::PHP5::Mcrypt: 0
Cpanel::Easy::PHP5::MemoryLimit: 0
Cpanel::Easy::PHP5::Mhash: 0
Cpanel::Easy::PHP5::MimeMagic: 0
Cpanel::Easy::PHP5::Ming: 0
Cpanel::Easy::PHP5::Mysql: 1
Cpanel::Easy::PHP5::MysqlOfSystem: 1
Cpanel::Easy::PHP5::Mysqli: 0
Cpanel::Easy::PHP5::Openssl: 1
Cpanel::Easy::PHP5::PDFLib: 0
Cpanel::Easy::PHP5::POSIX: 0
Cpanel::Easy::PHP5::PathInfoCheck: 0
Cpanel::Easy::PHP5::Pear: 0
Cpanel::Easy::PHP5::Pgsql: 0
Cpanel::Easy::PHP5::Pspell: 0
Cpanel::Easy::PHP5::SNMP: 0
Cpanel::Easy::PHP5::SOAP: 0
Cpanel::Easy::PHP5::SafeMode: 0
Cpanel::Easy::PHP5::SafePHPCGI: 0
Cpanel::Easy::PHP5::Sockets: 1
Cpanel::Easy::PHP5::Swf: 0
Cpanel::Easy::PHP5::SysTimezone: 0
Cpanel::Easy::PHP5::TTF: 0
Cpanel::Easy::PHP5::Tidy: 0
Cpanel::Easy::PHP5::Versioning: 0
Cpanel::Easy::PHP5::Wddx: 0
Cpanel::Easy::PHP5::WithoutIconv: 0
Cpanel::Easy::PHP5::XmlRPC: 0
Cpanel::Easy::PHP5::ZendMultibyte: 0
Cpanel::Easy::PHP5::Zip: 0
Cpanel::Easy::PHP5::Zlib: 1
Cpanel::Easy::PHPSuHosin: 1
Cpanel::Easy::Tomcat::7_0: 0
Now I have another after tunning mod_fcgid that improve performance and i am able to define different php.ini for configurations by user outside or inside the /home/ but I am still missing some features of the first configuration.

How I now what do that in the yaml

I am a bit lost with this values for example
Access: 0
Actions: 0
Alias: 0

The ideal will be some documentation about the vars into the Yaml file

Thanks!
 

theoxgr

Member
Oct 3, 2013
21
0
1
Greece, Thessaloniki
cPanel Access Level
Root Administrator
Re: How to Compare two easy apache configurations or where I can get info about the conf.yaml parame

being super-fast is not always the thing. i managed to be fast enough and secure using mod_ruid2 + suphp with suExec. you can search the forums and find this easyapache build. i think you will love it more. i switched from fcgi too.
 

cPanelMichael

Technical Support Community Manager
Staff member
Apr 11, 2011
47,910
2,233
363
cPanel Access Level
DataCenter Provider
Twitter
Re: How to Compare two easy apache configurations or where I can get info about the conf.yaml parame

Hello :)

The value of "0" indicates the Apache module is not enabled in the EasyApache build profile. Here is the example you provided:

Access: 0
Actions: 0
Alias: 0
This indicates that the Access, Actions, and Alias Apache modules are disabled in this profile. You can review a full list of Apache modules at:

List of Apache modules - Wikipedia, the free encyclopedia

To note, the following thread may be helpful to you if you are attempting to increase the security for suPHP:

Methods to increase security with suPHP

Thank you.
 

ITGabs

Well-Known Member
Jul 30, 2013
81
0
6
cPanel Access Level
Root Administrator
Re: How to Compare two easy apache configurations or where I can get info about the conf.yaml parame

Thanks Theoxgr, I know that the setup of mod_fcgid is a bit complex, RAM consuming and not so friendly but the performance, the low CPU usage and the FCGID wrappers are quite flexible and secure exactly what I need.

Thanks Michael, I thought the configuration of that yaml was more cryptic, but now is completely transparent and easy to read, after reading wikipedia a bit and comparing the yaml I can't find some yaml parameters like "bucketeer" but searching in google, I found exactly what I was expecting and pretty well documented

EasyApache: Apache Modules
 

cPanelKenneth

cPanel Development
Staff member
Apr 7, 2006
4,577
51
308
cPanel Access Level
Root Administrator
Re: How to Compare two easy apache configurations or where I can get info about the conf.yaml parame

Please keep in mind that some of the entries in the YAML file are actually reverse booleans. A reverse boolean is where 0 means true and 1 means false (whereas we typically have 0 mean false and 1 mean true). An example is the Asis module we provide Apache Module: Asis

Our EasyApache document notes which items are reverse booleans. Usually it's the ones marked as (default) in the table listed at EasyApache: Apache Modules
 

ITGabs

Well-Known Member
Jul 30, 2013
81
0
6
cPanel Access Level
Root Administrator
Re: How to Compare two easy apache configurations or where I can get info about the conf.yaml parame

Good point, I see many (default) in that table, probably the table must include that reverse boolean behavior just to be sure