mod-security-users

Re: [mod-security-users] SecChrootDir -> Premature end of script

[<he...@gm...>]

>> PHP is configured to run as CGI with suPHP.
>
>   This is the problem. Your jail probably does not contain all
>   the files needed for a new PHP process to start (with or
>   without suPHP). Because your Apache setup requires new
>   processes to be created at runtime you must setup the
>   jail the old-fashioned way.
>
>   Chapter 2 of Apache Security, Installation and Configuration,
>   is available free of charge:
>
>   http://www.apachesecurity.net/download/apachesecurity-ch02-beta.pdf
>
>   It contains detailed instructions how to create a jail
>   from scratch. Good luck :)

But its still working with mod_php. Just mod_suphp make Problems. Are you
working on this Problem ?
Thanks for your Help.

-- 
DSL Komplett von GMX +++ Supergünstig und stressfrei einsteigen!
AKTION "Kein Einrichtungspreis" nutzen: http://www.gmx.net/de/go/dsl

Re: [mod-security-users] SecChrootDir -> Premature end of script

[Ivan R. <iv...@we...>]

he...@gm... wrote:
>>>PHP is configured to run as CGI with suPHP.
>>
>>  This is the problem. Your jail probably does not contain all
>>  the files needed for a new PHP process to start (with or
>>  without suPHP). Because your Apache setup requires new
>>  processes to be created at runtime you must setup the
>>  jail the old-fashioned way.
>>
>>  Chapter 2 of Apache Security, Installation and Configuration,
>>  is available free of charge:
>>
>>  http://www.apachesecurity.net/download/apachesecurity-ch02-beta.pdf
>>
>>  It contains detailed instructions how to create a jail
>>  from scratch. Good luck :)
> 
> But its still working with mod_php. Just mod_suphp make Problems. Are you
> working on this Problem ?

   There is nothing I (or anyone else) can do to make CGI scripts
   (or mod_suphp) work in a partial jail. The only way out is to
   create a proper jail, as I described in my previous email.

   mod_php works because PHP is embedded in Apache. With mod_suphp,
   PHP is just a CGI script.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org