note 48666 deleted from security.apache by betz
| From: | betz@php.net | Date: | Wed, 15 Feb 2006 21:57:28 +0000 |
| Subject: | note 48666 deleted from security.apache by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-103804@lists.php.net to get a copy of this message | ||
Note Submitter: mike w
----
fyi, an alternative to the perchild mpm exists that I think works much better. It still requires a
proccess for each vhost, but in many cases that is a small price to pay for the huge gains in
security.
muxmpm/metuxmpm for apache 2
The Metux MPM is an module for the Apache 2.0 Webserver which allows it to run several VirtualHosts
under different User-IDs. Some other modules such as mod_cgid allow functionality which is
superficially similar. Metux MPM allows you to control the process' user IDs from the central
configuration, on the basis of individual or multiple VirtualHosts directives.
Metux MPM is a project evolution from the perchild module included in the offical Apache 2
distribution. Where perchild was has somewhat languished and many bugs remain unfixed, the Metux MPM
has been furiously advancing its development toward a stable release.
NOTE: This does not work with mod_ssl. I run a patched metuxmpm version of apache 2 for my vhosts
on port 80 and a seprate apache2 install for mod_ssl.
official site: http://www.metux.de/mpm/
Download and instructions: http://www.sannes.org/metuxmpm/