Re: [mod-security-users] SecChrootDir -> Premature end of script

[Ivan R. <iv...@we...>]

he...@gm... wrote:
>>>PHP is configured to run as CGI with suPHP.
>>
>>  This is the problem. Your jail probably does not contain all
>>  the files needed for a new PHP process to start (with or
>>  without suPHP). Because your Apache setup requires new
>>  processes to be created at runtime you must setup the
>>  jail the old-fashioned way.
>>
>>  Chapter 2 of Apache Security, Installation and Configuration,
>>  is available free of charge:
>>
>>  http://www.apachesecurity.net/download/apachesecurity-ch02-beta.pdf
>>
>>  It contains detailed instructions how to create a jail
>>  from scratch. Good luck :)
> 
> But its still working with mod_php. Just mod_suphp make Problems. Are you
> working on this Problem ?

   There is nothing I (or anyone else) can do to make CGI scripts
   (or mod_suphp) work in a partial jail. The only way out is to
   create a proper jail, as I described in my previous email.

   mod_php works because PHP is embedded in Apache. With mod_suphp,
   PHP is just a CGI script.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org