[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#161627: marked as done (Nice security feature for suexec with php-cgi)

Your message dated Wed, 24 Mar 2010 20:30:40 +0000 (WET)
with message-id <20100324203040.5F7AD3127@kmos.homeip.net>
and subject line Package apache-common has been removed from Debian
has caused the Debian Bug report #161627,
regarding Nice security feature for suexec with php-cgi
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
161627: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=161627
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: apache-common
Version: 1.3.26-1
Severity: normal

If use want use php-cgi with suexec ( cause this is the secure way ;-) ) and
with a php.ini vor each virtual host you must set :

<virtual host>
...
SetEnv PHPRC dir/to/php.ini/
...
</vritual host>


suexec will kill this ENV cause it don't know that it is "save".
I have make this : 

your old suexec_combined patch ..

------------schnipp -----------------
..... 

@@ -165,6 +166,8 @@
     "UNIQUE_ID",
     "USER_NAME",
     "TZ",
+    "HTTPS",
+    "REDIRECT_HTTPS",
     NULL
 };

...

----------schnipp---------------------

my new Part...


------------schnipp -----------------
..... 

@@ -165,6 +166,8 @@
     "UNIQUE_ID",
     "USER_NAME",
     "TZ",
+    "HTTPS",
+    "REDIRECT_HTTPS",
+    "PHPRC",
     NULL
 };

...

----------schnipp---------------------


Can you aplay it ?? This will make it more secure and nice to use php-cgi with
suexec.

		Thx a Lot 

                      Ruben


-- 
Ruben Puettmann
ruben@puettmann.net
http://www.puettmann.net

Attachment: pgp52Ri9BpN0t.pgp
Description: PGP signature


--- End Message ---
--- Begin Message --- 
Version: 1.3.34-4.1+rm

You filed the bug http://bugs.debian.org/161627 in Debian BTS
against the package apache-common. I'm closing it at *unstable*, but it will
remain open for older distributions.

For more information about this package's removal, read
http://bugs.debian.org/418266. That bug might give the reasons why
this package was removed and suggestions of possible replacements.

Don't hesitate to reply to this mail if you have any question.

Thank you for your contribution to Debian.

--
Marco Rodrigues

--- End Message ---
Reply to: