* shared hosting security: removed posix functions [shared hosting security]
* removed pcntl functions [shared hosting security]
* added dummy domxml package [compatibility with other packages that depend on it, such as certain plesk 8 packages]

This build does have cgi compiled with fastcgi support.

Additionally, there is a corresponding php-apc 3.1.0 rpm available in the downloads section for this build of php.

To get these files with up2date, add my rpm signing key:
rpm –import http://www.justinsamuel.com/downloads/rpms/RPM-GPG-KEY.js.txt

And add this line to your /etc/sysconfig/rhn/sources:
yum justinsamuel-com http://www.justinsamuel.com/downloads/rpms/redhat/el4/en/$ARCH/js/

—
topics: rh4, rhel4, red hat enterprise linux 4, centos4, cent os 4, php5, apc

to use this, for example on a plesk box to allow domains to use sftp without having to give them a chroot’ed bash shell, do the following:

- install the scponly rpm from the downloads area
- add the following line to your /etc/shells file
/usr/sbin/scponlyc
- set any domain you want to have sftp access without any other shell access to use this shell.
- optionally, edit your domain templates and make the default shell this one and remove ability for clients to change the shell for a domain

note that this will only allow domains to use sftp but not scp (at least on a redhat box). this is because plesk decided to put the scp binary for a site’s chroot someone different than it exists in the rest of the system, and so it’s not where the scponlyc shell will look for it. so, just keep that in mind in case anyone complains sftp works but not scp.

if you want to have scp work for a domain, hard link the domain’s bin/scp to usr/bin/scp. if you want, you can even make the change to the chroot directory so that newly created domains have scp available, too. and if you’re brave, you can use the chrootmng tool to setup existing domains with your changes to the chroot directory.

Trying to enable APC for all sites on a server that has the sites running php though fastcgi (with a very low shm_size) resulted in odd behaviour on some sites. An shm_size of 3 or 4MB on a site running drupal produced errors of apc_sma_free: could not locate address, but 2MB seemed to work fine. Other sites handled the setting of 3 or 4MB just fine. I didn’t test any further as all i really needed to verify for myself was that enabling APC for all sites wasn’t a good plan. I’ll stick to turning it on in each sites’s php.ini for now for those that are very heavily trafficked.

• removed posix functions (were enabled for cgi, cli and apache module)
• removed pcntl functions (were enabled for cgi)

This build does have cgi compiled with fastcgi support (the fedora php5 releases have that).