Fcgid with suexec run httpd as web user?

[toffe]

Hello, we have a webshop that syncs the product catalog from another webserver. We are told that we need to have fcgid installed and httpd needs to run as the webuser for it to work properly. Can this be done with suexec? Isn´t it a security issue if done so?

httpd runs now as nobody.

We are receiving these errors in the sync log when syncing the products:
- This call to PrestaShop Web Services failed and returned an HTTP status of 500. That means: Internal Server Error

- This call to PrestaShop Web Services failed and returned an HTTP status of 401. That means: Unauthorized.

Looking forward for your answers, thanks

 

[toffe]

As webuser I mean the "website" that is using the process

 

[cPanelMichael]

Hello,

We provide information about each PHP handler at:

PHP Handlers - EasyApache 4 - cPanel Documentation

If you need to install FCGId, we document how to do so (including the caveats) at:

Apache Module: FCGId - EasyApache 4 - cPanel Documentation

Additionally, you can find "mod_suexec" under the "Apache Modules" section when building a profile in "WHM >> EasyApache 4".

Thank you.

 

[toffe]

Hi, I have fcgid and mod_suexec installed. fcgid conf file is configured. Running /usr/local/cpanel/bin/rebuild_phpconf --available and /usr/local/cpanel/bin/rebuild_phpconf --current, does not show that mod_suexec is enabled (screenshot). Can I check somewhere that it is enabled?

 

[cPanelMichael]

Hello,

That script isn't designed to display if suexec is installed (it did in the past with EasyApache 3). We document this script at:

The rebuild_phpconf Script - Version 70 Documentation - cPanel Documentation

You can see if the RPM is installed with a command like this:

# rpm -qa|grep suexec
ea-apache24-mod_suexec-2.4.29-7.7.3.cpanel.x86_64

Thank you.