New in CWP Edge-LatestFree with every CWPpro licenceWebsites up to 300x faster

CWP now includes LSPHP, LSAPI-Cache and CWP Cage at no extra cost with all CWPpro licences. The LSAPI-Cache plugin is integrated into our WordPress and other script installers, and CWP Cage gives every user complete isolation. Available now in the CWP Edge-Latest version.

Get CWPpro ›

Access to Apache cwp-httpd-2.4.39-3.x86_64 Source Server Wide Scripts

Started by netstores, July 24, 2021, 10:50:36 PM

Previous topic - Next topic

netstores

To whom it may concern @ CWP.

After my exhaustive research on the issue of Server Wide Scripts, and why Cpanel has this working and not the cwp-httpd-2.4.39-3.x86_64.rpm is that I need to be able to have access to the source of this apache 2.4 build.

I know your installer creates and loads this rpm, and for me to use CWP, I would need access to the source of this build process.

I discovered how and what Cpanel did to allow this function of suexec that I desperately need.

It is a small change to the support/suexec.h and support/suexec.c files in the source tree of the make/build of the apache 2.4.

It is a few lines of code that they have done that creates this abillity to have a TRUSTED_USERS_SCRIPTS and it is a patch they created that allows our app to run on cpanel/ea4.

see: ea-apache2/0010-Update-suexec-to-allow-trusted-scripts.patch at master · CpanelInc/ea-apache2 · GitHub

I would be happy to make the changes, and would like to keep in line with everything you do to the httpd.rpm.

Would you be able to give me access to the build that makes the rpm so I can make the small changes necessary to add the allow trusted scripts functions of suexec binary?

I would greatly appreciate this, And, I will share all this work I will do with your community, because I believe that their may be others that want this function for larger hosting platforms.

READ THIS BEFORE CONTINUING!!
The patch below adds a feature which makes it possible to run "shared"
scripts. Suppose you are a systems admin for $large hosting provider and
you want to offer your customers some standard scripts. These scripts would
cause a security violation based on the uid owner of the script.
This patch makes it possible to "trust" a certain user/group. Look below to
define the user/group ID.
Uncomment the define to make it actually happen.
*/
Thanks

I hope we can continue working together in my quest to no longer use Cpanel and move to a different control panel.