[suPHP] Fwd: howto turn off new security sym-link feature?

...2«... buccinator at gmail.com
Wed May 14 07:33:14 CEST 2008


---------- Forwarded message ----------
From: ...2«... <buccinator at gmail.com>
Date: 2008/5/14
Subject: Re: [suPHP] howto turn off new security sym-link feature?
To: Jeremy Chadwick <suphp at jdc.parodius.com>


thanks for the reply!! i didnt bother to check a month past the release date

 why? i was looking for _documented_ changes - seeing it is one

 which why i emailed the author directly (week went no reply) and didnt
 bother much with the mail archives - frack, not like its hard to
 include with a changelog

 btw,

 check_parent_directory_ownership=false

 putting it in /etc/suphp/suphp.conf does nothing (if thats the answer)

 chown -h or symlinking issues on the filesystem are just that - not
your problem

 FollowSymlinks in apache doesnt work? i dont know dont care, im sure
 im not the only person who rollsover updated packages by distro
 automagically and wondered wtf happened - or wtf happened to the
 documentation for the new change if they did _try_ to RTFM

 originally i had the setup for _trusted_ virtuals to use the same code
 base from some installs, eg;

 web_friend1_dir/
 web_friend1:web_group1-index.php ->
 (www-suphp:www-suphp-web_share_dir/index.php)

 <snip>
 xxx SoftException in Application.cpp:262: UID or GID of symlink
 "/var/www/index.php" is not matching its target
 </snip>

 but obviously thats no good anymore, changing it to below produces;

 web_friend1_dir/
 www-suphp:www-suphp-index.php -> (www-suphp:www-suphp-web_share_dir/index.php)

 <snip>
 xxx SoftException in Application.cpp:499: Directory /var/www is not
 owned by www-suphp
 xxx SoftException in Application.cpp:499: Directory /var/www is not
 owned by www-suphp
 </snip>

 so is there another way to work around this? or again, disable the new
 feature - the answr above obviously does _not_ revert the behaviour
 back to 0.6.2 unless i missed some other piecemeal tidbit hidden
 somewhere under the blamegame..

 bang bang

 2008/5/13 Jeremy Chadwick <suphp at jdc.parodius.com>:

> Did you check the mailing list archives?  This feature was discussed
 >  heavily during April.
 im not the mailing list, im not a developer or beta tester or someone
 who cares about the internals, im a user who downloads and uses - whos
 asking howto use - this should be outside of the mailing list (frack
 by now) anyway


 >  http://lists.marsching.com/pipermail/suphp/2008-April/thread.html
 >
 >  See the thread labelled "0.6.3 issue with virtual hosts".  And yes, the
 >  replies are scattered all ovter the place, because not everyone's mail
 >  client supports decent cross-referencing data in mail headers.
 i read the replies online, i dont plan to join the mailing list, it
 was either bother or remove suPHP, thats was/is my option, im only
 unhappy because your catering abusing rightful use, simply noting it
 in the log would have been nicer - and probably even enough - imho -
 but yeh again - who cares, im here to bitch not to help



-- 
...2«...



More information about the suPHP mailing list