Hi,

Two questions

First, when apache gracefully reloads, it does not reload the modules?
is there an option to have it fully reloads them? or, is an option
planned?

Case: We use mod cband to control clients speed and limits, but if we
alter their configuration to increase the speed, reload does not
change it, only a full stop, and start changes. So pewrhaps a feature
request?

Second, SuExec, is there plan to modify suexec so docroot build option
is the absolute root of what can be accessed, similar to using
php_admin_value open_basedir  which locks down (yes I know it does its
best but rogue modules may break out of this) so users can not
traverse parent directories.

If apache/php can do its best to lock down php with no noticable
resource impact, can not understand why the main programme, apache,
can not either - without creating the nightmare that is jails, or
relying on third party modules like mod security, which have had
problems of their own, and even some configurations, like ours, mod
security is not by their own worlds, suited to our needs.

I know suexec hardens things up a little, and stops,. or at least
tracks who is being naughty, but, prevention is better than the cure.

Reply via email to