Skip to main content

Getting this message in easy apache

WebHostPro
On a customers server we are getting: Recommendations for "PHP DSO" * PHP DSO runs as the user nobody by default. In a shared hosting environment, this is a security issue. Learn More [LIST]
  • If you use suPHP, you will add some security, but may experience performance issues on your server. *These recommendations appear because you have "ea-php56-php" installed on your system. But we changed the DSO to CGI in the PHP handler. Is there something else we need to do to get rid of the security message?

    • Comments

    9 comments

    Date Votes
    • cPanelMichael
      Hello @WebHostPro, It's not possible to hide the message, but internal case EA-6219 is open to improve the recommendation message to account for cases where the DSO RPM is installed (but not enabled). I'll monitor this case and update this thread with more information as it becomes available. Thank you.
      0
    • HostXNow_Chris

      I'm seeing this now on

      OS
      CloudLinux v9.3.0 STANDARD standard
      cPanel Version
      118.0.4

      Recommendations for “ea-php81-php”: PHP DSO * PHP DSO runs as the user nobody by default. In a shared hosting environment, this is a security issue. Learn More We strongly recommend that you install one of the following packages unless this is a single-user system: ea-apache24-mod_ruid2 ea-apache24-mod_mpm_itk If you use suPHP, you will add some security, but may experience performance issues on your server. *These recommendations appear because you have “ea-php81-php” installed on your system. Recommendations for “ea-php82-php”: PHP DSO * PHP DSO runs as the user nobody by default. In a shared hosting environment, this is a security issue. Learn More We strongly recommend that you install one of the following packages unless this is a single-user system: ea-apache24-mod_ruid2 ea-apache24-mod_mpm_itk If you use suPHP, you will add some security, but may experience performance issues on your server. *These recommendations appear because you have “ea-php82-php” installed on your system.

      But there is no option to remove it or change it. Odd, because mod_mpm_worker and lsapi is being used for PHP handler.

      0
    • cPRex Jurassic Moderator

      I see the original issue was fixed in version 70.  Can you let me know where you're seeing this or how I can reproduce so I can take another look at this?

      0
    • jaxtheking

      Hello,

      I am experiencing the same warning. Just like the OP, I am using mod_mpm_worker and mod_lsapi.
      The server is a new machine with CloudLinux v8.10.0 STANDARD, cPanel 120.0.16 on AWS LightSail.

      0
    • cPRex Jurassic Moderator

      jaxtheking - worker isn't related to the PHP handler on the system.  Here's an overview of the handlers:

      https://docs.cpanel.net/ea4/php/php-handlers/

      and here's how you can change them on your system:

      https://support.cpanel.net/hc/en-us/articles/360053299534-How-to-install-PHP-handlers

      Do you still see that warning if you change the handler?

      0
    • jaxtheking

      Hi cPRex,

      you may have missed the part where I say I use mod_lsapi as PHP handler on the system - not DSO (mod_php). Or am I missing something??
      Thanks

      0
    • cPRex Jurassic Moderator

      BAH - I've missed TWO things today - apparently reading is hard!

      Since you can reproduce this issue, can you make a ticket?

      0
    • jaxtheking
      • Edited

      Easy done cPRex, it looks like I just did the same! lol

      I managed to get rid of the message. It turns out instead that I did have the php82-php extension enabled. It came preloaded with a profile, then was left on when I switched to mod_mpm_worker + LSAPI. When I added php83 from EA4, php83-php extension had not been enabled.

      The warning did say "Recommendations for “ea-php82-php”". I just missed the '-php' part.
      The message could have had another suggestion: "if you want to keep using mod_mpm_worker, disable php82-php" or something like that.

      Anyway, thanks for your support.

       

      0
    • cPRex Jurassic Moderator

      I'm glad that's all it turned out to be!

      0

    Please sign in to leave a comment.

    Didn't find what you were looking for?

    New post