note 57439 deleted from install.unix.commandline by betz
| From: | betz@php.net | Date: | Tue, 04 Oct 2005 13:37:39 +0000 |
| Subject: | note 57439 deleted from install.unix.commandline by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-96347@lists.php.net to get a copy of this message | ||
Note Submitter: lgb at lgb dot hu
----
For security reasons I want to chroot apache, so I'm using mod_security to do this (as well,
other functionalities of mod_security are also used). Because of this (and also for security
reasons: I've got dozens of vhosts with different cannot-be-trusted owners) I started to use
PHP in FastCGI mode. However because of chroot it's external through FastCgiExternalServer
directive. My only problem that I need a solution to have a separated FastCGI responder which can be
connected by Apache's mod_fastcgi from the chroot env., and that responder should maintain
processes, and creating setuid'ed and setgid'ed PHP interpreters on demand. However I
can't find any example for such a complex setup ;-(