[HOWTO] mod_ruid2

If it's running php as user, then I suppose yes, it could read files readable to any user. So I'm thinking we should still leave it on for users unless they need it off for some reason.

However, didn't I read somewhere that it's deprecated? If so, then what's being suggested to replace it?

Jeff
 
Yes, I confirm that, open_basedir isn't deprecated

+ Runtime tightening of open_basedir restrictions is now possible.
+ open_basedir is now PHP_INI_ALL
Click to expand...

http://www.php.net/manual/en/migration53.ini.php

As of PHP 5.3.0 open_basedir can be tightened at run-time. This means that if open_basedir is set to /www/ in php.ini a script can tighten the configuration to /www/tmp/ at run-time with ini_set(). When listing several directories, you can use the PATH_SEPARATOR constant as a separator regardless of the operating system.
Click to expand...

http://php.net/manual/en/ini.core.php
 
Thanks. I was simply confused.; I was thinking of safe mode.

Then are the best default settings for new sites in DirectAdmin open_basedir on and safe_mode off?

Jeff
 
smtalk said:
CustomBuild 2.0 RC1 is ready and should be uploaded to DA servers this week. It includes mod_ruid2 support (mod_ruid2=yes/no in the options.conf file). However, the system will need to run DA 1.40.2 (or pre-release binaries) for it to work, because mod_ruid2 needs modified templates.
Click to expand...
when should CB 2.0 and/or DA 1.40.2 should be expected...?
 
I think i have a problem with mod_ruid2.
Installation and conversion of the existing users all a success with thanks to all responses in this thread.
Now my problem:
When i upload files/folders with proftp all new folders get 755 instead of 711.
I am not sure of this is related to my real problem but something i noticed after several ties.
Before installing of mod_ruid2 of for example prestahop with setting all the needed folders 777 during install then after the install magically my local language (dutch) was added to the shop.
After the installation of mod_ruid2 and a fresh install of prestashop my dutch language does not get installed automatic and it is also not possible to add it afterwards.
No errors in the browser or the logs.
Could this be the 755 permissions on the folders?

Sorry forgot it is on Centos 5.7-64 with everything up to date.
 
Last edited:
We are using the configuration on our hosting servers without any problems. All users are able to install CMS systems etc. No need for chmod 777 since you are using mod_ruid2.

Permission on folders must be 755 and files 644.
 
Installation is in both situations succeeded and with mod_ruid2 there was no need to set any folders to 777.
Sofar i agree.
Only normally all user folders are 711 after the installation of mod_ruid2 according to the first post except that every new uploaded folders gets 755

Tried a new install of prestashop with all folders set to 711 after upload and problem remains.
Prestashop is not able to add translations without any visible errors.
 
Last edited:
I was first trying to solve the problem and just mentioned the problem.

For mrtg to work again the ownership of the mrtg folder has to be set back to root:

Code: 
chown -R root:root /var/www/html/mrtg

Graphs get updated again and also the png's are build only the page does not show correct and the log says:

Code: 
[Fri Feb 24 15:03:35 2012] [error] [client xx.xx.xx.xx] (13)Permission denied: file permissions deny server access: /var/www/html/mrtg/memory-day.png, referer: http://xx.xxxx.xx/mrtg/

All files in /mrtg are 644 root:root
Folders are 755 root:root
 
Last edited:
I got my mrtg dir webapps:webapps just as the other things in /var/www/html like phpmyadmin. The dir shouldn't need root as owner/group for mrtg to work; if it would run as root it can access it anyway and if its another user it doesn't make sense.
 
Arieh said:
I got my mrtg dir webapps:webapps just as the other things in /var/www/html like phpmyadmin. The dir shouldn't need root as owner/group for mrtg to work; if it would run as root it can access it anyway and if its another user it doesn't make sense.
Click to expand...
Indeed, no files in the /var/www/html/ should be root:root but webapps:webapps, same as the HowTo.
 
Still running around in circles and not making any progress.

Set the mrtg folder and its files back to webapps:webapps and the html files of mrtg can be displayed now.
As long as mrtg does not touch the generated png's everything works but after the generating of new files by mrtg these files go back to root:root and can not be displayed.
This is the log entry for the failed file:
Code: 
[Fri Feb 24 20:05:47 2012] [error] [client XX.xx.xx.xx] (13)Permission denied: file permissions deny server access: /var/www/html/mrtg/network-day.png, referer: http://xx.xx.xx/mrtg/network.html
For me it looks like mod_ruid2 does not allow the access to files owned by root although the permission is 644.

I think something is wrong in my setup and this problem emerged after the installation of mod_ruid2 and this mrtg hickup is related to my other prestahop problem
 
Code: 
-rw-r--r-- 1 root root 2,4K feb 24 22:20 /var/www/html/mrtg/network-day.png

I hope you can give me a clue where to look.
Tested with a simple index.html and a .jpg and the moment the .jpg is owned by root perm. 644 the problem occurs.
 
asekeris said:
Code: 
-rw-r--r-- 1 root root 2,4K feb 24 22:20 /var/www/html/mrtg/network-day.png

I hope you can give me a clue where to look.
Tested with a simple index.html and a .jpg and the moment the .jpg is owned by root perm. 644 the problem occurs.
Click to expand...
Try this below, can you then open the image in your browser?
Code: 
chown webapps:webapps /var/www/html/mrtg/network-day.png
If not then check the mrtg config file if you can set a user/group for the file owners.
 
The moment i set the ownership to something else then root i can display the image so webapps works and for example apache to.
As far as i know mrtg does not have an option for the ownership of the generated files.
 
You must log in or register to reply here.
Back
Top