From owner-freebsd-questions@FreeBSD.ORG Thu Jul 9 14:36:56 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1C0651065672 for ; Thu, 9 Jul 2009 14:36:56 +0000 (UTC) (envelope-from geekounet@poildetroll.net) Received: from tritus.poildetroll.net (tritus.poildetroll.net [81.93.245.19]) by mx1.freebsd.org (Postfix) with ESMTP id CEBD08FC1A for ; Thu, 9 Jul 2009 14:36:55 +0000 (UTC) (envelope-from geekounet@poildetroll.net) Received: from korriban.poildetroll.net (vol75-4-82-225-32-7.fbx.proxad.net [82.225.32.7]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by tritus.poildetroll.net (Postfix) with ESMTPSA id 04D9549F; Thu, 9 Jul 2009 16:20:52 +0200 (CEST) Message-ID: <4A55FCBD.90809@poildetroll.net> Date: Thu, 09 Jul 2009 16:20:45 +0200 From: Pierre Guinoiseau Organization: Poil de Troll User-Agent: Thunderbird 2.0.0.22 (X11/20090627) MIME-Version: 1.0 To: Nicolas Letellier References: <20090709113534.43373278@belegost.nicoelro.net> <20090709122212.658bcc24@belegost.nicoelro.net> <1247136597.2653.15.camel@frodon.be-bif.ulb.ac.be> <20090709134329.0f86c78b@belegost.nicoelro.net> <1247142971.2653.19.camel@frodon.be-bif.ulb.ac.be> <20090709160550.40c9f6c4@belegost.nicoelro.net> In-Reply-To: <20090709160550.40c9f6c4@belegost.nicoelro.net> X-Enigmail-Version: 0.95.7 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigFB6C837A6F7002A084C9014E" Cc: freebsd-questions@freebsd.org Subject: Re: Secure apache with php X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jul 2009 14:36:56 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigFB6C837A6F7002A084C9014E Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Just build www/apache22 with WITH_MPM=3Ditk and you'll have it. :) Then add something like this in each vhost: AssignUserId my_user my_group Nicolas Letellier wrote: > Le Thu, 09 Jul 2009 14:36:11 +0200, > Julien Cigar a =C3=A9crit : >=20 >>> When I tested php in cgi, performances were bad. That's why, >>> php_mod is better (in my case !=3D >>> >> It's not CGI, it's FastCGI. >> There is no performance loss if you use an opcode cacher (like >> x-cache). >> > And is anyboy use mpm-itk ? > I'm interested more with this solution than another php fix (like > safe_mode, open_basedir or cgi/fastcie). >=20 --------------enigFB6C837A6F7002A084C9014E Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkpV/MQACgkQJikNJSAyef/yggCaAp4jWpsIDWUptX0+pM//fKm4 legAoJTAJUXsf6BUuTGkBzyuh+koqf/v =N99+ -----END PGP SIGNATURE----- --------------enigFB6C837A6F7002A084C9014E--