A quick fix for php 5.2.17 as secondary php !

[Spacedust]

Rename in /etc/suphp.conf from:

Code: [Select]

errors_to_browser=false
to

Code: [Select]

errors_to_browser=true
and then check affected domain. It seems I got /home directory writable by others !

So it's worth to add

Code: [Select]

chmod 750 /home
to /script/fixweb !

[Spacedust]

On my production system I got this error:

Code: [Select]

Directory / is not owned by admin

[MRatWork]

I don't know what's you mean ' /home directory writable by others'?

[Spacedust]

I don't know what's you mean ' /home directory writable by others'?

I got chmod 777 on /home on my test system which is very bad.

On my production system it was ok, but getting this:

Code: [Select]

Directory / is not owned by admin

[Spacedust]

My /etc/suphp.conf:

Code: [Select]

[global]
logfile=/var/log/httpd/suphp_log
loglevel=info
webserver_user=apache
docroot=/
env_path=/bin:/usr/bin
umask=0022
min_uid=500
min_gid=48

; Security options
allow_file_group_writeable=true
allow_file_others_writeable=false
allow_directory_group_writeable=true
allow_directory_others_writeable=false

;Check wheter script is within DOCUMENT_ROOT
check_vhost_docroot=false

;Send minor error messages to browser
errors_to_browser=true

[handlers]
;Handler for php-scripts
x-httpd-php="php:/usr/bin/php-cgi"
; x-httpd-php52="php:/usr/local/lxlabs/ext/php/bin/php_cgi"
x-httpd-php52="php:/usr/local/lxlabs/ext/php/etc/lxphpcgi.sh"

;Handler for CGI-scripts
x-suphp-cgi="execute:!self"

;;; MR -- for using php52 just enough add 'AddHandler x-httpd-php52 .php' on .htaccess.
;;; it's make possible running 'dual php' on server!


[Spacedust]

The same happens on all customers :/

[MRatWork]

Immediately release bug-fix. Change using from '/usr/local/lxlabs/ext/php/etc/lxphpcgi.sh' (it's possible security issue because using php.ini of lxphp where without disable_functions) to '/home/apache/etc/suphp/phpcgi.sh'.

Need re-click 'enable secondary php' on 'webserver configs' and 'sh /script/fix-chownchmod' (because need 755 permissions for '/home/apache/etc/suphp/phpcgi.sh').

[Spacedust]

Immediately release bug-fix. Change using from '/usr/local/lxlabs/ext/php/etc/lxphpcgi.sh' (it's possible security issue because using php.ini of lxphp where without disable_functions) to '/home/apache/etc/suphp/phpcgi.sh'.

Need re-click 'enable secondary php' on 'webserver configs' and 'sh /script/fix-chownchmod' (because need 755 permissions for '/home/apache/etc/suphp/phpcgi.sh').

Ouch !

[Spacedust]

Immediately release bug-fix. Change using from '/usr/local/lxlabs/ext/php/etc/lxphpcgi.sh' (it's possible security issue because using php.ini of lxphp where without disable_functions) to '/home/apache/etc/suphp/phpcgi.sh'.

Need re-click 'enable secondary php' on 'webserver configs' and 'sh /script/fix-chownchmod' (because need 755 permissions for '/home/apache/etc/suphp/phpcgi.sh').

Ouch !

cat: /home/apache/etc/suphp/phpcgi.sh: No such file or directory...

[MRatWork]

Run 'sh /script/cleanup' or copy '/usr/local/lxlabs/kloxo/file/apache/' to '/home/apache'

[Spacedust]

Run 'sh /script/cleanup' or copy '/usr/local/lxlabs/kloxo/file/apache/' to '/home/apache'

Thank you. I've runned /script/cleanup-simple as always

[Spacedust]

You forgot to add:

/etc/rc.d/init.d/qmail stop
/etc/rc.d/init.d/qmail start

to cleanup-simple.

My monitoring is detecting IMAP error without this...

[Spacedust]

Done - still getting this:

Code: [Select]

Directory / is not owned by admin

[MRatWork]

Done - still getting this:

Code: [Select]

Directory / is not owned by admin

Inform here log file with content 'Directory / is not owned by admin'

[Spacedust]

Done - still getting this:

Code: [Select]

Directory / is not owned by admin

Inform here log file with content 'Directory / is not owned by admin'

Which log file ?

Code: [Select]

ls -l /home/admin/test.domain.pl/
razem 12K
drwxr-xr-x 2 admin admin 4,0K maj  4 22:35 cgi-bin
drwxr-xr-x 2 admin admin 4,0K lut 12 05:10 images
-rw-r--r-- 1 admin admin 2,6K maj  4 22:35 index.html
-rw-r--r-- 1 admin admin    0 lut  4  2012 index.php