M
mlcprs
Guest
Hi,
As a Plesk, VPS and Apache beginner, I need to change the server configuration on Plesk such that the effect of the SuexecUserGroup directive is removed, so the user's cgi scripts run as the apache user (www-data), rather than as the user specified in that directive (the domain user), just like on an unshared (non-VPS) server. I don't care about security from other domains because only one domain runs on it anyway, so making the user domain-specific is irrelevant from a security point of view and stops some of the user's code working.
This directive is found in httpd.include
and is:
SuexecUserGroup user psacln
(this line appears twice, for ports 443 and 80)
I understand that this file can't be modified, as it may be overwritten by Plesk. Therefore additional directives must go in the vhost.conf file.
I tried creating the following vhost.conf file in the hope it would override the directives in httpd.include. Is it even possible to override it? The server will effectively see two conflicting SuexecUserGroup directives. Also I'm not sure it will be happy with a repeat of the VirtualHost directive.
<VirtualHost 1.2.3.4:443>
SuexecUserGroup www-data www-data
</VirtualHost>
<VirtualHost 1.2.3.4:80>
SuexecUserGroup www-data www-data
</VirtualHost>
Anyway, the effect of this was to stop Apache running.
I'd be grateful for any advice from someone who knows something about Apache configuration and suexec.
Regards,
Peter
As a Plesk, VPS and Apache beginner, I need to change the server configuration on Plesk such that the effect of the SuexecUserGroup directive is removed, so the user's cgi scripts run as the apache user (www-data), rather than as the user specified in that directive (the domain user), just like on an unshared (non-VPS) server. I don't care about security from other domains because only one domain runs on it anyway, so making the user domain-specific is irrelevant from a security point of view and stops some of the user's code working.
This directive is found in httpd.include
and is:
SuexecUserGroup user psacln
(this line appears twice, for ports 443 and 80)
I understand that this file can't be modified, as it may be overwritten by Plesk. Therefore additional directives must go in the vhost.conf file.
I tried creating the following vhost.conf file in the hope it would override the directives in httpd.include. Is it even possible to override it? The server will effectively see two conflicting SuexecUserGroup directives. Also I'm not sure it will be happy with a repeat of the VirtualHost directive.
<VirtualHost 1.2.3.4:443>
SuexecUserGroup www-data www-data
</VirtualHost>
<VirtualHost 1.2.3.4:80>
SuexecUserGroup www-data www-data
</VirtualHost>
Anyway, the effect of this was to stop Apache running.
I'd be grateful for any advice from someone who knows something about Apache configuration and suexec.
Regards,
Peter