Greetings, "Przemyslaw.Orzechowski" !
>>> Beside this users in virtualmin can change local php.ini files so ..
>>> I'm searching for as much as possible generic solution for this
>>> Apparmor seems quite good at this when using mod_apparmor in apache (at
>>> least for static content).
>> What Apache httpd modules have to do, when you said you're using PHP as
> Enabled Apache2 modules
> actions, alias, auth_basic, auth_digest, authn_file, authz_default,
> authz_groupfile, authz_host, authz_user, autoindex, cgi, dav, dav_fs,
> dav_svn, authz_svn, deflate, dir, env, fcgid, mime, negotiation, proxy,
> proxy_balancer, proxy_connect, proxy_http, reqtimeout, rewrite, ruby,
> setenvif, ssl, status, suexec
Switch to pure php fcgi, if you REALLY want performance.
You can spawn as many interpreters, as you want, and they will not be killed,
remaining memory footprint predictable, and execution times low.
Or stick with mod_php (either handler or filter - I prefer Apache2 filter
module, rather than legacy handler one), if you are not concerned with
performance. Or if you so much concerned, that you've already set up a caching
frontend, like nginx or varnish.
Or, well, move to pure nginx+php/fcgi.
Andrey Repin (anrdaemon@...) 02.03.2012, <03:10>
Sorry for my terrible english...