As we know from original article using Apache, PHP in CGI mode along with suExec gives us 2 important security advantages:
– suExec allows to run PHP process with (only) the file owner user privileges, enforcing proper permissions on PHP scripts and thus allowing to avoid cross-site exploits on the server that is running multiple dynamic web sites;
– per site php.ini.
That gives some unique opportunities for securing separate web sites on the server.
Read more »
Tag Archives: php.ini
Apache, PHP, SuEXEC: added security and control
Posted by al3x
on 04/15/2011
No comments
Apache2, PHP, SuEXEC configuration on CentOS
Posted by al3x
on 11/06/2010
2 comments
There are plenty of tutorials on the web. Tons and tons.
However when I had to create working configuration and put together Virtualmin template most of these instruction just didn’t work properly. After some time I’ve came up with my own working configuration and proper Virtualmin apache template for CentOS.
As a bonus we’ll have per-user php.ini and apache2 worker MPM which is a little bit faster and less resource hungry then traditional prefork MPM.
Read more »