suPHP EOL

[sawbuck]

Interested to know what cPanel staff suggests as an alternative.

https://lists.marsching.com/pipermail/suphp/2013-May/002554.html

 

[cPanelMichael]

Hello

Our developers/management are aware of this announcement. It's currently still under discussion on how to proceed and handle suPHP. It's important to note that suPHP is still available and can be used as intended for the time being. More information will be provided as it becomes available.

Thank you.

 

[cPanelDon]

The suPHP EOL issue was assigned internal case 68789; this case number can be referenced in future inquiries.

 

[ThinIce]

Hrm, in light of this be even more interesting to see how the apache jails feature pans out when it hits release

 

[cPanelDon]

Hrm, in light of this be even more interesting to see how the apache jails feature pans out when it hits release

To the best of my knowledge, the jailed virtual host feature requires mod_ruid2 and does not rely directly upon suPHP.

 

[ThinIce]

Yeah, I really meant in terms of whether those two (apache jails and mod_ruid2) turn out once widely tested to be a workable replacement for suphp in terms of general user seperation and addressing specific risks such as the apache symlink problem addressed in the sticky elsewhere

 

[quanin]

Time to possibly revisit the idea of PHP SuEXEC? Because some of us don't run jails.

 

[cPanelDon]

Time to possibly revisit the idea of PHP SuEXEC? Because some of us don't run jails.

In cPanel&WHM 11.38, the jailed virtual host feature is entirely optional; you can still use mod_ruid2 without having jailed virtual hosts.

 

[tibbitts]

The suPHP EOL issue was assigned internal case 68789; this case number can be referenced in future inquiries.

Has there been any update to this internal case?

 

[Infopro]

I've just checked for you, there are no updates to that case at this time to report unfortunately.