Hi all, Just installed the Virtualmin module into my Webmin. First thing I want to do is disable BIND DNS and mail (for now). However …
… when I click save I get “Failed to save enabled features : Apache configuration file /etc/apache2/mods-enabled/php5.conf contains SetHandler lines that prevent PHP from running with domain owner permissions. These lines must be removed.”
I’m trying to be security conscious here so would appreciate a little help on giving Virtualmin the minimum privileges it needs in order to do what it does. My current php5.conf has these FilesMatch entries <pre>
As far as I understand it, this directive channels requests for PHP files via to PHP engine.
<FilesMatch “.+.ph(p[345]?|t|tml)$”> SetHandler application/x-httpd-php </FilesMatch>
#Not sure what this one is doing <FilesMatch “.+.phps$”> SetHandler application/x-httpd-php-source # Deny access to raw php sources by default # To re-enable it’s recommended to enable access to the files # only in specific virtual host or directory Order Deny,Allow Deny from all </FilesMatch>
#Comment seems self-explanatory
Deny access to files without filename (e.g. ‘.php’)
<FilesMatch “^.ph(p[345]?|t|tml|ps)$”> Order Deny,Allow Deny from all </FilesMatch> </pre> Has anyone got two minutes to give me a steer on what these entries are currently doing and how I should give Virtualmin the necessary minimum privileges. Looks like my issue is with the second block, right?
Thanks Mark
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi Mark!
Your understanding of what the two FilesMatch blocks are doing is correct. The first one is directing the php files to be executed and the second keeps people from downloading the raw php source. Virtualmin adds its own Apache configuration to each “Virtual Server” it creates, so you can comment these out and it should work.
Though this illustrates exactly why I don’t like to recommend panels. They try to take over large parts of the server, and they are sometimes very difficult to properly audit.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.