How to setup Apache2 mpm-itk under Virtualmin?

Virtualmin
21

Sounds to me like you’d just want to disable Suexec in Virtualmin, and add “AssignUserID” to the Apache website Server Template section. You can get to the UID for the user with the ${UID} variable.

So, it’d look something like this:

[code:1]
ServerName ${DOM}
ServerAlias www.${DOM}
AssignUserID ${UID}
DocumentRoot ${HOME}/public_html
ErrorLog ${HOME}/logs/error_log
CustomLog ${HOME}/logs/access_log combined
ScriptAlias /cgi-bin/ ${HOME}/cgi-bin/
<Directory ${HOME}/public_html>
Options Indexes IncludesNOEXEC FollowSymLinks
allow from all
AllowOverride All
</Directory>
<Directory ${HOME}/cgi-bin>
allow from all
</Directory>
[/code:1]

And you’d want to make sure mod_php is the execution type for PHP scripts, and suexec is disabled.

22

Sounds to me like you’d just want to disable Suexec in Virtualmin, and add “AssignUserID” to the Apache website Server Template section. You can get to the UID for the user with the ${UID} variable.

So, it’d look something like this:

[code:1]
ServerName ${DOM}
ServerAlias www.${DOM}
AssignUserID ${UID}
DocumentRoot ${HOME}/public_html
ErrorLog ${HOME}/logs/error_log
CustomLog ${HOME}/logs/access_log combined
ScriptAlias /cgi-bin/ ${HOME}/cgi-bin/
<Directory ${HOME}/public_html>
Options Indexes IncludesNOEXEC FollowSymLinks
allow from all
AllowOverride All
</Directory>
<Directory ${HOME}/cgi-bin>
allow from all
</Directory>
[/code:1]

And you’d want to make sure mod_php is the execution type for PHP scripts, and suexec is disabled.

23

Joe wrote:

Sounds to me like you'd just want to disable Suexec in Virtualmin, and add "AssignUserID" to the Apache website Server Template section. You can get to the UID for the user with the ${UID} variable.

So, it’d look something like this:

[code:1]
ServerName ${DOM}
ServerAlias www.${DOM}
AssignUserID ${UID}
…
[/code:1]


Just FYI, I don’t think this is quite correct. The AssignUserID directive needs to be of the form:

[code:1]
AssignUserID ${USER} ${GROUP}
[/code:1]I’m using mpm-itk (I prefer its benchmarks to suexec’s, even with mod_fcgid) and discovered the above along the way. See the official docs here: http://mpm-itk.sesse.net/ (section “Configuration Variables”). Hope this helps anyone else who’s as far off the beaten track as me!

24

Sounds to me like you’d just want to disable Suexec in Virtualmin, and add “AssignUserID” to the Apache website Server Template section. You can get to the UID for the user with the ${UID} variable.

So, it’d look something like this:

[code:1]
ServerName ${DOM}
ServerAlias www.${DOM}
AssignUserID ${UID}
DocumentRoot ${HOME}/public_html
ErrorLog ${HOME}/logs/error_log
CustomLog ${HOME}/logs/access_log combined
ScriptAlias /cgi-bin/ ${HOME}/cgi-bin/
<Directory ${HOME}/public_html>
Options Indexes IncludesNOEXEC FollowSymLinks
allow from all
AllowOverride All
</Directory>
<Directory ${HOME}/cgi-bin>
allow from all
</Directory>
[/code:1]

And you’d want to make sure mod_php is the execution type for PHP scripts, and suexec is disabled.

25

Increase Apache Vhost Security With mpm-itk In RHEL/CentOS 5

26

Agreeing with robpomeroy…In chat with a hosting provider who runs over 10K Joomla sites, they are running ITK exclusively. They consider it the optimal solution, and ready for production, obviously.

It would be nice to see some consideration of http://mpm-itk.sesse.net/ in Virtualmin.