If you want files owned by different users to execute …

Wednesday, 17th April 2024

Comment on Installing SuPHP on Debian Lenny 5.04 with Apache 2.2.9 by admin.

If you want files owned by different users to execute with the respective user, and through this tighten security then you will definitely have advantage.

There is the moment that suphp is external module and it’s not that tested as the rest of apache modules.
ISo it all depends on your case 🙂

admin Also Commented

Installing SuPHP on Debian Lenny 5.04 with Apache 2.2.9
I’m glad you make it sorry, too bad magento is buggy. But you know, you never get guarantees with free software 🙂
Hope to be seeing you around.

Wish you best!
Georgi


Installing SuPHP on Debian Lenny 5.04 with Apache 2.2.9
Hi I’m glad you have realized the general problem with fastcgi. With fastcgi it’s always tricky 🙂
About the umask, umask sets the default value for permissions of newly created files.
umask comes from from user file-creation mode mask (umask) is use to determine the file permission for newly created files.
Most linux distros nowdays has an umask set to 0022. Usually an umask of 0022 should be a good one for you. the umask of 0022 would set file attributes to new files equal to chmod’s 0644 (eg. 0022 is calculated by substracting 0666-022 = 0644, an umask of 0022 would also create your newly created directories under the main directory tree with permissions of 755. If you want to have a really restrictive umask you might set a value of 007. You can further experiment with umask and read about it. There is a plenty of documentation about umasks, just check out ‘man bash’, ‘help umask’ and ‘man chmod’. It’s all quite understandable explained in the mans.
I cannot get it about headers and mod_suphp.conf?


Installing SuPHP on Debian Lenny 5.04 with Apache 2.2.9
Hi Maurica,
Check your permissions.
The “Internal Server Error” common appears in apache error log because of some kind of file or directory permission issues.
Check that your files are being owned by the user you’re trying to exec the scripts with. Check also that your directories are properly readable by the sued user as well as they have the “+x” flag for the same user. Try to simulate the apache sued scenario with a normal “su – youruser” and see what will happen.
This might help.

Another root of the internal server error problems might be because you have some kind of default .htaccess file for the whole webserver or some kind of .htaccess rules for the plesk maybe. If nothing works out try to stop temporary the plesk and see how it goes without it.

Hope some of my presumed tips will help you.

Best!
Georgi


Recent Comments by admin

A Biography of one big Heart + His Holiness Patriarch Neophyte (Neofit) head of Bulgarian Orthodox Church

От архива: Христовата любов побеждава дори смъртта, твърдеше приживе патриарх Неофит


A Biography of one big Heart + His Holiness Patriarch Neophyte (Neofit) head of Bulgarian Orthodox Church

Българският Патриарх Неофит в Москва на 8 Март 2016 г. ЧАСТ 2
 


Christ is Risen Eastern Orthodox Resurrection Paschal Greeting in Different Languages
Hi Stan,

I guess you cannot read the writtings on the icon as it is in cyrillic.
This is not Saint Mary and Saint Peter but Adam and Eve written in cyrillic on top of the icon.
Actually in orthodoxy it is a requirement for the depicted personalities, especially saints to have
written on the names of the saint and have the Halo. If you look closely at the picture you will notice
the two Adam and Eve are missing a Halo. The only person with a Halo in the icon is Saint John the Baptist.

Best Regards
Georgi


Install and configure rkhunter for improved security on a PCI DSS Linux / BSD servers with no access to Internet
       –rwo, –report-warnings-only
              This option causes only warning messages to be displayed. This can be useful when rkhunter is run via cron. Other options may
              be used to force other items of information to be displayed.

       –sk, –skip-keypress
              When  the  –check command option is used, after certain sections of tests, the user will be prompted to press the return key
              in order to continue. This option disables that feature, and rkhunter will run until all the tests have completed.

         


Install and configure rkhunter for improved security on a PCI DSS Linux / BSD servers with no access to Internet
As rkhunter check, can be pretty annoying and ask you to press keypresses multiple times and spit you a lot of unnecessery data a very good useful option arguments are:

–rwo and –sk

# rkhunter -c –rwo –sk
Warning: The SSH and rkhunter configuration options should be the same:
         SSH configuration option 'PermitRootLogin': yes
         Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no


Share this on:

Comments are closed.