One of my customers wants me to change the ownership to nobody and group to apache in a directory created in the home directory of his website. I want to know whether doing so will pose any security problem. Also is there any advantage of changing the owner to nobody and group to apache?
View 11 RepliesFreeBSD 7.0
Apache 2.2
PHP5
Mysql 5.1
I have been battling this for a while. A user will setup a CMS like joomla, e107, etc and every time the CMS changes files either with user interaction on the website or the admin changing things in their cms admin web page, apache takes ownership of the files.
I have tried installing suPHP, FastCGI, and most recently suexec. I am not having any luck with this. I really don't know what I am doing with these recent additions but meanly going on suggestions. Does anyone know of a walk through to fix this permission problem? Anyone with some good advise? Surely not everyone is having to write a script to chown each user's dir and run a cronjob every 5 minutes.
when i run CSF security check i get
Check /tmp ownershipWARNING/tmp should be owned by root:root
the /tmp seems to be set to nobody:nobody
Is it a Security Risk.?
Other options are set fine on /tmp
Check /tmp permissionsOK
Check /tmp is mounted as a filesystemOK
Check /tmp is mounted noexec,nosuidOK
running centos + cpanel and Apache 1.3.x
Does anyone here know who owns Rackedge NL? Are they a member of this forum? I am having a real bad problem, that certainly defy's logic and reason and i can’t seem to get any replies from either member McRox or the Support team.
Rather than posting wildly around the net about them and this issue, I would prefer to first ensure this isn’t just a big misunderstanding, so any details anyone can offer on this.
There is only 3 people i have been in contact with in this company
McRox (Member of this forum)
Tony Deeman (Support)
John de Groot (Sales)
I have it setup and have a user created that can upload files to my website.
The problem that I am running in to is that the files that this user uploads are owned by him not the cpanel website user. Thus when I try to view the page in my browser I get a server 500 error since the site is set to only serve up pages that are owned by the cpanel website user.
When using FTP in the same way we did not have this problem as the file that was uploaded would automatically be owned by the cpanel website user.
i got a unmanaged vps and i do not know why i often see folders and files ownership belonging to apache instead of myself and i have to manually reset ownership via directadmin file manager or ssh in to do it....can anyone advise me how to fix this problem as in anything i can do to stop all these apache ownership problem...
Another thing about directadmin, i select all folders and files at once trying to reset ownership but i always get an error and have to reset ownership one by one wasting time....
I'm Running (just) Direct Admin On a Centos 4.3
Due to a typo at the comand line as Root, ive manages to change the owner ship of unknown mounts of files.
The command that was processed (Before it was complete)
chown -R reseller:reseller /
I managed to stop the process ctr+c
and these were the last files to see fly past.
The last one in the list is where it stopped at.
Code:
chown: changing ownership of `/proc/11566/task/11566': Operation not permitted
chown: changing ownership of `/proc/11566/task/11566/fd/0': No such device or address
chown: changing ownership of `/proc/11566/fd/0': No such device or address
chown: changing ownership of `/proc/11572': Operation not permitted
chown: changing ownership of `/proc/11572/task/11572': Operation not permitted
chown: changing ownership of `/proc/11572/task/11572/fd/4': No such file or directory
chown: changing ownership of `/proc/11572/task/11572/cwd': Operation not permitted
chown: changing ownership of `/proc/11572/fd/4': No such file or directory
chown: changing ownership of `/proc/11572/cwd': Operation not permitted
chown: changing ownership of `/etc/X11/X': No such file or directory
chown: changing ownership of `/dev/core': Operation not permitted
chown: changing ownership of `/usr/local/include/libpng/libpng12':
Too many levels of symbolic links
At the moment the server is still running and it seems only to be log in issues with Direct admin. All user / reseller / Admin accounts can no longer log in.
Error after logging in : Unable to determine Usertype user.conf needs to be repaired
No images or nothing
I have to mass change the ownership of accounts and I find "Change Owner of Multiple Accounts" tedious.
I found a bash script but I'm not sure if this works
Quote:
#!/bin/bash
IFS="$"
cd /var/cpanel/users
if [ $# = 2 ]; then
replace "OWNER=${1}" "OWNER=${2}" -- /var/cpanel/users/*
else
echo "USAGE: ./${0} <old reseller login> <new reseller login>"
fi
If that works, how can I tweak it so that the change in ownership of accounts will be based in the hosting package and not in the old reseller account?
When I have checked the 'Current CPU Usage' in root WHM there was a stranger IP with root ownership and command: whostmgrd - serving xxx.xxx.xxx.xxx
Also there was my IP with this ownership and command, like every time I am viewing the WHM.
I have blocked this IP with apf immediately, and the root password is changed.
Does it mean someone was in root WHM?
I have a dedicated server with cpanel on centos 4.6 / chkrootkit and rkhunter / all of server's softwares are up to date / compilers disabled for users / php open base dir is enabled and my users do not have SSH access.
Am I correct the r1soft does not preserve permission/ownership?
View 5 Replies View RelatedI have a software program on my home PC that writes to files on my remote VPS every few minutes.
The only way I can accomplish this is to CHMOD the files to 777 and give the whole world write priveledges.
Is there a way I can give my external (home) IP address write priveledges to certain files on my VPS without CHMODing them as 777?
I run the latest version of cPanel and WHM on my VPS.
Is it possible to change apache2.conf service name with httpd.conf ?
View 2 Replies View RelatedI am trying to change permissions on my perl and CGI files to execute them for my website.
I have a laptop I am using as my server. It has Windows Server 2003. I have Apache, and Active Perl. IIS is disabled. My website loads just fine.. I just cant change the permissions or find out how.
How do I change the permissions on my perl and cgi files?
We have a SAP portal and Apache server in our environment. The URL which users see is like http://portal:50000/irj/portal in some cases after login, from a program we are calling the url http://portal:50000/irj/portal/alias1 in the same window. In this case the URL changes in explorer.
I am trying to find out if I can mask the url and keep it the same as http://portal:50000/irj/portal, but Apache to send calls to SAP server as http://portal:50000/irj/portal/alias1, so the end user cannot see the URL change.
APache is running under the "nobody" user/group as default in CPanel servers
as a suggestion I should change it to another user/group to improve security!
But in CPanel servers its hard to do that because you must edit some scripts and files to prevent the backing to nobody when running some scripts such
PHP Code:
/scripts/chownpublichtmls/scripts/enablefileprotect
or when create a new account
Some sites says "the secret of changing the user/group is in the UID/GID of nobody < 100 !"
so I found a solution :
1 - delete the user/goup nobody
2 - recreate it with GID/UID > 30000
3 - run /scripts/chownpublichtmls
so the question is that solution improve security or i should change the user/group to another one! like "www"?
I just made a fresh install of the following :
Apache 2.4 (x64)
PHP 5.5.5 Thread Safe (x64)
OS: Windows 8.1 (x64)
And I think everything is working. When openingen 127.0.0.1 I see the apache message that the server is running and when executing phpinfo() it displays the PHP info.
My problem is that I'm trying to change the document root.
I have change the following in the httpd.conf:
DocumentRoot "C:/Apache24/htdocs"
<Directory "C:/Apache24/htdocs">
The lines abowe have been change to:
DocumentRoot "D:/www"
<Directory "D:/www">
After this I did a reboot of the apache server using the CMD httpd -k restart. I even tried restarting using the apachemonitor and rebooted the whole server. But apache still loads the files from c:/Apache24/htdocs
I can't find any more entries with htdocs to change. What am I missing?
I run windows 8.1
Installed Apache 2.4.10 into c:apache24
Apache is run as service
I tried to change documentroot and directory to e:xxx....
When I test localhost/test_apache.html (my own html) I get error
"Forbidden You don't have permission to access / on this server."
Have I changed all needed parameter or is it a real permission problem?
run a command on /var/git to set rights and onwer without being cautious enough.I have run chown git:git .* -R which did not only run direction downwards the tree but upwards as well :-(
Any way to reset permissions and ownership for the directories back to standard?I tried /usr/local/psa/bin/repair already. Did lot of the fixes, but not all is in line yet.
Recently I moved my WordPress website to another server, After moving my site I see that my all files permission set to 664, for that I getting many error, now I want change all files permission 644, but problem is I have many subdomain with this site, is there any way to make change all files permission to 644 with SSH or any other way?
View 1 Replies View RelatedI'm running Apache 2.4.7 on a RHEL 6.4 server. I'm using the Oracle WebLogic Proxy Plugin ver 12.c to connect to a back end server.What's happening is that Apache answers URL.. and proxies the request via the WebLogic Proxy Plugin to internal.blah.com. Unfortunately, the downstream system encounters a problem and issues an http 302 redirect to internal.blah.com/whathappened. I would like to have Apache intercept this http 302 and redirect the client to URL...
View 1 Replies View RelatedI'm new to Apache. I'm using a version 2.4 for Windows 7. It didn't come in as an .msi so I had to configure the appropriate web-server name via the httpd text document.
Each time I go to http://localhost, I am present with a page with the content "It works." I tried adding a different .html file into the directory to see if I could access that also, but I was not able to navigate to it via the address bar. So I edited the content of index.html from 'It works!' to "It works?!!!" but sadly, the actual page is still showing 'It works!' for its content (Rather ironic, huh?).
So, for whatever reason, the actual 'localhost' page isn't updating or even noticing any of my edits in what I presume to be the correct directory.
Here's my httpd document for referenc [URL] ....
Hosting Settings
There is no php support - so i can´t change or choose running as apache module or cgi application (s. screenshot)...
OS Ubuntu 12.04.5 LTS
Panel version 11.5.30 Update #50, last updated at July 17, 2015 03:46 AM
I have a client on a dedicated IP, today we needed to downgrade the web hosting plan. As the web hosting plan puts users on a default shared IP, this plan change also changed the dedicated IP to the shared one causing some propagation issues for a small period of time.
I have contacted WHMCS about this asking if they had a way of changing the clients plan but keeping the IP address intact as this could lead to some very undesirable outcomes. They explained that it is not their fault and to contact Parallels.
I know I can change the plan directly in Plesk however by initiating the plan change via WHMCS, everything is automated.
Has anyone helped clients transition from one domain to another? Maybe dissolving a partnership or renaming their company... so a new domain name has been registered and a new website created.
2 Issues:
#1 Using .htaccess 301 redirect
We used the following command line in their old website's htaccess file
Redirect 301 / [url]
The goal was to get people try to visit any page of their old website (i.e. OldWebsite.com/contact.html) redirected to their new website (i.e. NewWebsite.com/contact.html). Isn't that supposed to change the address bar's URL, too? For some reason, I visit their old site and I seem to be redirected to their new website but the address bar still has their old domain name? Something is going on???
#2 Having their new company name for 2 years now. People can enter her new company name in Google, MSN or Yahoo. Her new company name appears in the search results but has the old domain name associated with it. We are trying to get rid of any reference to that old domain name? What's the easiest way to do this? So what people see in search engines is:
New Company
Short Meta Description
www.OldDomain.com
What steps did I miss in this transition?
What steps do I have to take on their old website/old web server to control it's appearance on search engines and make sure people get to the new website?
I have a few sites that I point to my nameservers, but the accounts aren't set up yet for them.... quite a few actually... and while they might only be on this page for a day or two at most, a few of the sites get quite a bit of traffic.
Can someone please tell me where I can find this HTML file so I can edit and brand my own custom page in place of this "Great Success!" Apache / cPanel default error page?
A client of mine just recently asked for a new IP. His subscription near to expiry date.
He considering to renew but only will renew if I can give him a new IP. Not to buy another but instead a new IP to replace the old one. If it helps, he use the vps of his to run proxy, a socks proxy perhaps.
I am familiar with proxies and have quite an experienced running several group of successful proxies thus asking for an IP probably means his old IP is more than 50% blocked.
What do you think? Should I just change his IP?
We are moving to a new rack at our DC. Now the IP addresses will change.
BUT.. we have a mailserver running, and all users are pointed at the current name "mailserver.domain.com" which itself is pointing to the old IP.
So far so good...
BUT we need to move that server to the new rack, and so we need to change the IP. But if we change the IP in the DNS, it will take till 24 hours for all the providers to propogate the new IP. For those users, the mailserver will be offline.
How can we fix that properly? So that no-one has any serious downtime?
Anyone got a clue on how to do so?
root@linux [~]# lynx -dump [url]
Your ip is: 10.20.30.40
i want to change this ip to: 10.20.30.41 when i execute: lynx -dump [url]
i dont know how to do it.