Re: best practice: suexec with PHP5 in a many-user/non-technical-user environment

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



My understanding of suEXEC (not that I have used it) is that it will automatically discover which user to execute as when pulling from a location configured with UserDir (with some limitations, search http://httpd.apache.org/docs/2.2/suexec.html for UserDir).

- Y

On Wed, Oct 26, 2011 at 10:07 PM, Alexandr Normuradov <normalex@xxxxxxxxx> wrote:
Same config headache as SuexecUserGroup directive.
Everything can be nicely automated with a bash script and Includes to
sub configs.
As of ~userdir, let them run their web sites, just put proper
thresholds and universal cache, like mod_cache, that handles pretty
much everything.
ITK has some nice thresholds and limits that you can safely adjust.


Sincerely,
Alexandr Normuradov



On 26 October 2011 20:58, Yehuda Katz <yehuda@xxxxxxxxxx> wrote:
> On Wed, Oct 26, 2011 at 9:49 PM, Alexandr Normuradov <normalex@xxxxxxxxx>
> wrote:
>>
>> Use MPM ITK.
>> Solves security, memory and speed problems.
>> Tested in production, very good alternative for environments when
>> users are not very savvy and not require custom php.ini
>
> I use ITK with great results, but it needs to be configured for every
> virtual host individually.
> I believe the original poster is looking for a solution that will work with
> ~userdirs.
> I should add that I do not know of any universities that allow students to
> run arbitrary code on the primary servers.
> At the University of Maryland, you can not run ANY code on the users server
> (they used to allow SSI, but that is gone now too) and many departments
> require an internal audit of your application before they will let it run on
> their servers.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux