[lug] suexec and shared object

MATSUI Nobuki Nobuki.Matsui at Colorado.EDU
Mon Jul 12 17:42:07 MDT 2004


Hi,
	I am trying to install apache, postgres and php combo on linux
macines.  My plan is to set up a directory with its uid/gid above min
where php files would reside rather than setting up binary php through
cgi.  I would like to use mod_phpsuexec and possibly mod_security as well.
But, my configuration process will not create shared object .so
files in apache2/modules directory; it create just .a and .la files.
It's probably an expected behavior as suexec doesn't want a runtime
dynamic linking by some inappropriate user, but I'm not sure of it.

Below is from apxs man page, but will this sort of procedures to create
.so files happen automatically, if you enable suexec at run time?
$ cd php3
$ ./configure --with-shared-apache=../apache-1.3
$ apxs -c -o libphp3.so mod_php3.c libmodphp3-so.a
gcc -fpic -DSHARED_MODULE -I/tmp/apache/include  -c mod_php3.c
ld -Bshareable -o libphp3.so mod_php3.o libmodphp3-so.a
$ _

And below is the shell script I use to configure apache (httpd-2.0.50.)

#!/bin/sh
./configure --with-layout=Apache --with-ssl=/usr/lib/ssl \
--enable-mods-shared=most --enable-module=mmap_static --enable-module=so \
--enable-shared=ssl  --enable-suexec \
--enable-caller=apache --with-suexec-uidmin=1000  \
--with-suexec-gidmin=1000 \
--enable-rewrite --enable-speling --enable-usertrack \
--enable-mime-magic --enable-deflate --enable-info --enable-cgi
# maybe not --enable-cgi

I am trying this on both fedora core and debian sarge.  If you know some
better way of achieving the same goal, that would be great too.

I always appreciate your help at Boulder lug.
best,

Nobuki Matsui
SRRB CIRES/NOAA






More information about the LUG mailing list