Questions tagged [suexec]
The suexec tag has no usage guidance.
97 questions
0
votes
1
answer
536
views
Does SuexecUserGroup work with Virtualhost in Apache 2.4
I'm trying to set up a virtualhost that uses CGI scripts that run as a particular user and group. I'm using the SuexecUserGroup directive, but that doesn't seem to work.
Basic setup. User "Bob&...
1
vote
1
answer
870
views
Apache 2.4 VHosts with FastCGI and suexec-custom
I have setup at my local machine Ubuntu 22.04 Apache 2.4 with suexec-custom.
In fact, this setup was working from Ubuntu 16 up to this update to 22.04.
I only load some modules, reload some other and ...
- 481
0
votes
1
answer
73
views
apache2 suexec destroy my day
I have a puzzle with http suEXEC now.
It is a bit of frustration. Basically apache2 report weird lines in error.log
[Fri Dec 18 11:29:57.385776 2020] [ssl:info] [pid 10944] AH01876: mod_ssl/2.4.38 ...
- 9
1
vote
1
answer
2k
views
mod_fcgid: error reading data from FastCGI server / 500 Internal Server Error
I've trying to set up an IIPImage server but the Images won't display:
https://oooledge.de/wisski_views/b719fd1ac3844863103c508912965b883443
First here are logs, configs, modules and permissions:
...
- 21
0
votes
0
answers
118
views
linux shared folder for all users php not working mod_hive suexec
Feel free to educate me - I'm migrating from a windows server to a dedicated linux server with apache 2.4 and centos 6.10 ... all users on the server are actually ME, so this part is not a security ...
1
vote
0
answers
24
views
I restored a vhost under Webmin, now php script are executed as www-data
Under Webmin (Debian 8), I restored a vhost (without deleting the existing vhost), then I chose 'No' to the question "reallocate UID and GID", now the php scripts run as www-data, I would like the php ...
- 199
1
vote
1
answer
209
views
Suexec: invalid command error
I'm trying to set lighttpd with suexec, but something goes wrong on testing: when I try to launch something via suexec, it gives me in log:
[2017-10-08 00:23:24]: invalid command (/srv/http/main/...
- 13
0
votes
1
answer
1k
views
suEXEC queries www-data when trying to execute a script as userXYZ
I am setting up a suexec environment with Apache2 and PHP 7.0 with FastCGI.
I have installed everything the normal way
Aptitude install libapache2-mod-fcgid apache2-suexec-custom
A2enmod suexec
My ...
- 843
6
votes
1
answer
789
views
Environment variables not available on server after mod_rewrite, but works locally
I am working on a site where I am using SSI to set a variable on an HTML page that gets parsed and the variable is then to be picked up by a script after a mod_rewrite rewrite. This works on my local ...
- 161
1
vote
1
answer
699
views
Apache RewriteRule for each User directory
I have two directories in each of my users' home folders: .html-data and .cgi-bin. The first one contains static (.html) files, the second one contains files for dynamic document generation.
Each ...
- 11
0
votes
1
answer
147
views
Can cgi scripts with permission 775 run under suEXEC?
We have suEXEC installed, and we also use git version control.
suEXEC only allows cgi scripts to run with permission 755. Git sets file permissions on cgi scripts (and all executables) to 775.
Is ...
- 187
1
vote
0
answers
1k
views
SuExec with Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm in Debian 8
I installed Apache2.4 + Php5.6 + mod_proxy_fcgi + php-fpm and other things like Mysql 5.5, Phpmyadmin and munin, no problem. Note: I activated also userdir and rewrite.
Now I want to have more ...
- 11
-2
votes
1
answer
56
views
Strange behaviour with linux permissions
Hopefully someone can help me out, my site isn`t working ATM due to an issue.
I changed the apache MPM and for that I needed to change virtualmin to have it run as virtualserver owner (was the only ...
- 119
0
votes
2
answers
608
views
vsftpd permissions for virtual users with Apache SUexec compatibility
I run a linux server with Apache + SUexec where all virtualhosts htdocs folder are owed by specific users :
# ls /www/sites
drwxr-xr-x 4 vhost-sitea.com vhost-sitea.com 4096 Oct 13 16:45 www....
- 11
1
vote
0
answers
749
views
apache suexec + php + fcgid does not log errors
Strangely my apache does not log errors anymore ever since I managed to enable fcgid and suexec for php processing. Even simple files with only <? dwakdnawjkdn(); ?> won't create any error, even ...
- 427
1
vote
0
answers
2k
views
FastCGI apache reload issue (suexec)
I am trying to setup a a django (mod-wsgi) app on a server on the subdomain accounts.mysite.com (D.O. Droplet). When I try to reload apache, I get the following errors:
AH00526: Syntax error on line ...
- 131
0
votes
1
answer
381
views
suexec AP_DOC_ROOT Path on gentoo
after a few years running php as mod_php I want to move to fcgi. On my server I run currently gentoo linux. I allready set up php als fcgi and everything is working.
But there is one problem. I have ...
- 221
0
votes
1
answer
409
views
Why does Apache need o+x permissions for a Virtual Host running under suEXEC?
Running Apache 2.4.10 on Arch Linux.
I'm trying to restrict an SFTP user to only be able to access his home directory, a public folder under a vhost directory, without being able to access that vhost ...
- 255
2
votes
1
answer
263
views
Suexec PHP does not load php.ini
I'm using FastCGI with suEXEC for PHP on CentOS 7. My wrapper script looks as follows:
#!/bin/sh
PHPRC=/home/ben/etc/
export PHPRC
export TMPDIR=/home/ben/tmp/
exec /usr/bin/php-cgi -c /home/ben/etc/...
- 21
-1
votes
2
answers
1k
views
How to sandbox a website subfolder?
Let's say I have a website under www.example.com and would like to also have a blog under a subfolder, e.g. www.example.com/blog/. How can I sandbox this folder, so that any script running inside it, ...
- 99
0
votes
1
answer
1k
views
suEXEC is enabled but apache is still using "apache" user for every website [closed]
I'm using Plesk 12 with some modules enabled, including suexec:
But when I run whoami from a PHP script, I still get apache's default user: apache
What am I doing wrong? Should I double check some ...
- 415
4
votes
3
answers
11k
views
multiple mounts of same NFS share on one client?
I'm moving webspace content to NFSv3 shares. Because of suexec restrictions I have different paths to different subsets of the content on the client. I wonder if I can still have all of the content in ...
- 69
0
votes
1
answer
2k
views
Centos6 Apache configure SUEXEC wrapper
On a Centos 6 trying to upgrade to a specific apache version (from 2.2.24 to 2.2.25) from source since yum doesn't have the right version I need (or the very least I can't find the repo for it) and I ...
- 159
3
votes
1
answer
20k
views
Setting up Apache 2.2 + FastCGI + SuExec + PHP-FPM on Centos 6
I'm trying to follow this very detailed instruction here, I simply changed from www-data user to apache user, and is using /var/www/hosts/sitename/public_html instead of /home/user/public_html
...
- 215
1
vote
1
answer
1k
views
Apache suEXEC execute script on user dir basis?
Iam looking for a way to run a script with different users.
I dont want to hardcode the users in the config... and I found some information that it should be possible that the user goes to... lets say:...
- 131
0
votes
1
answer
389
views
configuring awstats with suexec
I have a web server with more than 100 websites running apache and php as fcgid and suexec.
I have configured awstats on my server(FreeBSD) following awstats installation on FreeBSD but when I try ...
- 1
1
vote
1
answer
1k
views
trac: "Internal server error (500)" with mod_fcgid and mod_suexec
I try to setup Trac on a shared server with shell access, SW is Trac 1.0.1, Python 2.6.6, Apache 2.2.15 with mod_fcgid and mod_suexec.
I've set it up following the instructions from the wiki of my ...
- 21
2
votes
1
answer
2k
views
PHP-FPM SuExecUserGroup not working
I have installed php, apache, and fastcgi_handler by:
emerge dev-lang/php www-apache/mod_fastcgi_handler
I managed to make it work by updating the relevant lines in /etc/apache2/modules.d/...
0
votes
2
answers
11k
views
Apache startup is failed
My server was terminated abnormally because power was turned off.
After start server I can't to run Apache.
$ /etc/init.d/httpd start
Starting httpd: [...
- 37
0
votes
1
answer
1k
views
Configuring suExec to work with Apache and PHP via FastCGI
I have installed ISPConfig 3 on an Ubuntu VPS and configured it for Apache + PHP via FastCGI and suexec. I am able to upload PHP apps (e.g. Wordpress) and run them normally w/ suexec.
However, for ...
- 193
1
vote
1
answer
3k
views
Errors getting apache working with fcgi and suexec
I have a Debian 6 server and I was previously using Apache with mod_php but decided to switch to using fcgi instead since Wordpress was somehow causing Apache to crash. I have the following in my site'...
- 689
1
vote
1
answer
518
views
How to enable group-writable suexec-capable CGI scripts?
I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
- 3,196
1
vote
1
answer
353
views
apache+php-fpm and security in shared enviroment compared to apache+suexec+mod_fastcgi
I've been using Apache with suexec and mod_fastcgi. It starts up PHP handlers as the selected system user and listens to request via PIPES (fastcgi protocol). It works well but can't share opcode via ...
- 11
1
vote
1
answer
1k
views
Multiple VHosts with FastCGI and Suexec
I have a Debian virtual machine server which I have full control over, but I have someone who wants to host a single domain on it. This is obviously a security concern, as even if his particular user ...
- 151
1
vote
2
answers
3k
views
Can't Get New Instance Of RT To Start
I am trying to transplant an instance of RT 4.0.1 (with local code customization) from a CentOS 4 server to a CentOS 6 server.
My problem appears to be that I can't get the fastcgi script to start.
...
- 14.4k
0
votes
2
answers
98
views
Modules to protect PHP and Perl from accessing other users file/data? [closed]
I've use to use a combination of suPHP with suExec in order to try to protect the users and limiting the PHP/Perl from running out of their allowed space (i.e.: user/tmp folders).
Its been a while ...
- 5,261
0
votes
1
answer
577
views
From suPHP to mod_php
I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
- 156
0
votes
1
answer
2k
views
How to avoid '403 Forbidden' response in Apache with suEXEC enabled
I have configured an Apache 2.2 web server with suEXEC following a couple of tutorials after reading the official documentation. I'll put a short summary here:
# Install and enable Apache, suEXEC, ...
- 209
0
votes
3
answers
1k
views
Preventing error_log flooding
Is there a way to have httpd/php stop logging errors if they are repeating over and over again to prevent flooding?
Currently the /usr/local/apache/logs/error_log file is getting flooded and would ...
- 6,691
1
vote
1
answer
855
views
Mechanism behind user forwarding in ScriptAliasMatch
I am following this tutorial to setup gitolite and at some point the following ScriptAliasMatch is used:
ScriptAliasMatch \
"(?x)^/(.*/(HEAD | \
info/refs | \
objects/(info/[^/]+ | \
[0-9a-f]{2}/[0-...
- 141
1
vote
1
answer
619
views
How to download source, modify source, recompile and build .deb package?
I have to customize my Apache2 suExec module to ensure some special environment variables getting passed through suExec.
How to download the source code form Debian package apache2-suexec, modify ...
- 2,176
16
votes
2
answers
22k
views
Multiple php versions simultaneously on Ubuntu
I want to be able to run multiple php versions on my development box running Ubuntu 12.04. What I want to accomplish is that when I use localhost as a domain a default is used (let's say php 5.3.17). ...
- 271
-1
votes
1
answer
342
views
Files uploaded with php scripts are owned by apache on Directadmin [closed]
Uploaded files are owned by apache, I have DirectAdmin installed and also mod_suexec is loaded into Apache. So is there anyway to upload file with account owner under mod_php(php5_module)?
- 1,594
0
votes
3
answers
603
views
Apache - suExec - FastCGI - PHP = security issue
I installed Apache with FastCGI (mod_fastcgi), suExec and PHP on my local development box. Working perfectly, except one thing.
Let's say I have two users:
user1 - /home/user1/public_html
user2 - /...
- 13
4
votes
1
answer
1k
views
Apache mass virtual hosting & suexec & fcgid
I followed Falco's tutorial and everything now works as expected for 2 users (e.g. john and alice) with their relevant directories (/var/www/john and /var/ww/alice).
Now, I want to go to the next ...
- 481
1
vote
1
answer
434
views
suexec failing scriptalias without logs
I am trying to install gitolite 3 on a apache2 server. So I need to run a CGI script owned by git:git. My configuration for achieving this (based mainly on this) is:
<VirtualHost myserver.com>
...
- 141
1
vote
0
answers
150
views
suexec executes world writable php files and files owned by root. why?
I've configured my server to use suexec for php this weekend. Now I've recognized that suexec also serves files owned by root or that are world writable. But this seems to me not like the standard ...
- 397
0
votes
2
answers
535
views
Apache with suexec, fcgid shows content from wrong vHost over ssl
I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec.
Allmost everything works fine. I wrote a ...
- 21
4
votes
4
answers
10k
views
SuExec: “command not in docroot” Even Though It Is?
Arch Linux 2011.08.19 (Linux 3.4.2 i686)
Apache 2.2.22 with SuExec
PHP 5.4.4 (cli) via FastCGI
My sites were all working fine earlier… I’m not sure when it happened because I noticed it over a week ...
- 255
7
votes
4
answers
19k
views
How to change suexec root directory from "/var/www" to "/home"?
Hi I've installed suexec using on ubuntu 12.04:
apt-get install apache2 apache2-suexec libapache2-mod-fcgid php5-cgi
However when I run the following command:
sudo /usr/lib/apache2/suexec -V
I get ...
- 351