Votes for example 3rd party easyapache options modules

What are the most useful options you'd like to see EasyApache build?


  • Total voters
    35

AlanH

Active Member
Mar 25, 2006
25
0
151
MPM-itk for Apache 2.2 is now available at easyapache.cpanel.net
I can't seem to find this anywhere. Has it been withdrawn or has the site restructure just hidden it somewhere? I'd like to do some testing with it.
 

cPDan

cPanel Staff
Staff member
Mar 9, 2004
724
15
243
I can't seem to find this anywhere. Has it been withdrawn or has the site restructure just hidden it somewhere? I'd like to do some testing with it.
The custom option module we did was removed because, aside from threading issues w/ PHP, there is a huge root security issue that the module site itself outlines:

apache2-mpm-itk under "Quirks" oddly enough :)

"Since mpm-itk has to be able to setuid(), it runs as root (although restricted with POSIX capabilities where possible) until the request is parsed and the vhost determined. This means that any security hole before the request is parsed will be a root security hole. (The most likely place is probably in mod_ssl.)"

That being the case it is not very likely that we'll provide one in any form.