httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yehuda Katz <yeh...@ymkatz.net>
Subject Re: [users@httpd] best practice: suexec with PHP5 in a many-user/non-technical-user environment
Date Thu, 27 Oct 2011 02:31:38 GMT
My understanding of suEXEC (not that I have used it) is that it will
automatically discover which user to execute as when pulling from a location
configured with UserDir (with some limitations, search
http://httpd.apache.org/docs/2.2/suexec.html for UserDir).

- Y

On Wed, Oct 26, 2011 at 10:07 PM, Alexandr Normuradov <normalex@gmail.com>wrote:

> Same config headache as SuexecUserGroup directive.
> Everything can be nicely automated with a bash script and Includes to
> sub configs.
> As of ~userdir, let them run their web sites, just put proper
> thresholds and universal cache, like mod_cache, that handles pretty
> much everything.
> ITK has some nice thresholds and limits that you can safely adjust.
>
>
> Sincerely,
> Alexandr Normuradov
>
>
>
> On 26 October 2011 20:58, Yehuda Katz <yehuda@ymkatz.net> wrote:
> > On Wed, Oct 26, 2011 at 9:49 PM, Alexandr Normuradov <normalex@gmail.com
> >
> > wrote:
> >>
> >> Use MPM ITK.
> >> Solves security, memory and speed problems.
> >> Tested in production, very good alternative for environments when
> >> users are not very savvy and not require custom php.ini
> >
> > I use ITK with great results, but it needs to be configured for every
> > virtual host individually.
> > I believe the original poster is looking for a solution that will work
> with
> > ~userdirs.
> > I should add that I do not know of any universities that allow students
> to
> > run arbitrary code on the primary servers.
> > At the University of Maryland, you can not run ANY code on the users
> server
> > (they used to allow SSI, but that is gone now too) and many departments
> > require an internal audit of your application before they will let it run
> on
> > their servers.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Mime
View raw message