Suphp + a yum question

[brayden1]

Hi,

Had a username here - "Brayden" - but have since changed the email address I used to register that account and have forgotten the password.

Anyway - 1st question.

Given that SWSoft seem to be taking the 'ye olde worlde' approach and not listening to feature requests, has anyone actually gotten suPHP to compile and work with Plesk 8.2.x and PHP 5.2.3 (ART Repo - Love your work mate) and not have it break? I really need this deployed on our server as we are looking at offering webhosting soon and need the server as secure as humanly possible.

Second question, upon running 'yum check-update' on the server (CentOS 4.2) I have these come up:

cups.i386 1:1.1.22-0.rc1.9.20.2. update
cups-libs.i386 1:1.1.22-0.rc1.9.20.2. update
httpd.i386 2.0.59-1.el4s1.8.el4.c centosplus
httpd-devel.i386 2.0.59-1.el4s1.8.el4.c centosplus
httpd-manual.i386 2.0.59-1.el4s1.8.el4.c centosplus
kernel.i686 2.6.9-55.0.12.plus.c4 centosplus
kernel-devel.i686 2.6.9-55.0.12.plus.c4 centosplus
kernel-hugemem-devel.i686 2.6.9-55.0.12.plus.c4 centosplus
kernel-smp.i686 2.6.9-55.0.12.plus.c4 centosplus
kernel-smp-devel.i686 2.6.9-55.0.12.plus.c4 centosplus
libpng.i386 2:1.2.7-3.el4_5.1 update
mod_perl.i386 2.0.3-1.el4s1.3 centosplus
mod_ssl.i386 1:2.0.59-1.el4s1.8.el4 centosplus
mysqlclient14.i386 4.1.22-2.el4.art atomic
pcre.i386 4.5-4.el4_5.4 update
pcre-devel.i386 4.5-4.el4_5.4 update
perl.i386 4:5.8.8-5.el4s1_2 centosplus
perl-DBI.i386 1.54-1.el4s1 centosplus
perl-HTML-Parser.i386 3.55-1.el4.art atomic
perl-TimeDate.noarch 1.16-1.c4 extras
perl-libwww-perl.noarch 5.805-1.1.1 centosplus
php-ioncube-loader.i386 1:3.1-2.el4.art atomic
postgresql.i386 8.1.9-1.el4s1.1 centosplus
postgresql-libs.i386 8.1.9-1.el4s1.1 centosplus
postgresql-server.i386 8.1.9-1.el4s1.1 centosplus
spamassassin.i386 1:3.2.3-3.el4.art atomic

Is there anything there I should *not* let yum update? (except for the kernel, I think?)

I am a bit worried about breaking something, and I am not sure if I should let spamassassin update, as I already have psa-spamassassin installed (but can't use it as the lisense key does not support it)

Thanks in advance,

Brayden

 

[atomicturtle]

Update it all, you've got some critical security updates on that list.

I did some suphp rpms a while back, they're probably due for a major update. What is lacking is the integration into plesk to create the configuration settings when a domain is updated, or created. That could probably be done with the event manager.

 

[brayden1]

Hi ART,

Should I let the kernel update too? I'm afraid of it breaking Plesk/the sites on the server.

 

[atomicturtle]

Yep, totally safe. Kernel updates just add new kernels to the list, worst case if it doesn't boot, you just use the old one again.

 

[brayden1]

Unrelated question - I installed your Spamassassin, qmailscanner and clamAV packages.

It's all working, but Mysqld is now using stacks of CPU and the load is up - even with clamav stopped.

Have you seen this before?

P.S "yum update" went fine

 

[atomicturtle]

Spamassassin, q-s, and clamav don't use mysql by default, so nothing comes to mind that would do that. Log in to mysql and take a look at the process list (show processlist).

 

[brayden1]

So I've got this again - but this time a MASS of updates from the art plesk repo etc.. everywhere! Including one that says:

centos-release.i386 6:4-4.4 base

There has to be at least 150 updates there + a new kernel.

Is it safe to let yum update them all?

 

[atomicturtle]

Yup, go for it