Dan Mahoney, System Admin wrote:
> What OS?

Debian Linux Etch 4.0r1
Apache 2.2.3
PHP 5.2.0
suphp 0.6.2, I assume it comes compiled in owner mode. (This is how it 
appears to work when I'm using local user's home directories)

That is the mode that we want because we have many users and we don't 
want to have to specify UID's or GID's. It should be done based on the 
owner of the script.

> That said, I have a similar "squash" in effect on my end.  Accesses by 
> root on the NFS client map to UID -1 on the server -- so as long as all 
> the files involved are world-readable (as they should be) you should be 
> fine (as I'm currently looking through my homedir as root...but can't 
> open my .mail file.

It is true that suphp has no problem when the php file in question is 
world-readable, but we don't want all php files to be world readable. 
That doesn't make much sense.

> Could you post the exact log errors?

[Mon Dec 17 11:18:04 2007] [warn] File /fsh/dwitherscsr/www/phpinfo.php 
does not exist

Here is my suphp.conf file:
[global]
;Path to logfile
logfile=/var/log/suphp/suphp.log

;Loglevel
loglevel=info

;User Apache is running as
webserver_user=www-data

;Path all scripts have to be in
docroot=/

;Path to chroot() to before executing script
;chroot=/mychroot

; Security options
allow_file_group_writeable=false
allow_file_others_writeable=false
allow_directory_group_writeable=false
allow_directory_others_writeable=false

;Check wheter script is within DOCUMENT_ROOT
check_vhost_docroot=false

;Send minor error messages to browser
errors_to_browser=true

;PATH environment variable
env_path=/bin:/usr/bin

;Umask to set, specify in octal notation
umask=0077

; Minimum UID
min_uid=100

; Minimum GID
min_gid=100


[handlers]
;Handler for php-scripts
x-httpd-php=php:/usr/bin/php-cgi

;Handler for CGI-scripts
x-suphp-cgi=execute:!self

-- 
Drew A. Withers <[EMAIL PROTECTED]>
Assistant CAEDM CSR
Brigham Young University

_______________________________________________
suPHP mailing list
[email protected]
http://lists.marsching.biz/mailman/listinfo/suphp

Reply via email to