Ask Question Forum:
Model Library:2025-02-08 Updated:A.I. model is online for auto reply question page
C
O
M
P
U
T
E
R
2
8
Show
#
ASK
RECENT
←
- Underline
- Bold
- Italic
- Indent
- Step
- Bullet
- Quote
- Cut
- Copy
- Paste
- Table
- Spelling
- Find & Replace
- Undo
- Redo
- Link
- Attach
- Clear
- Code
Below area will not be traslated by Google,you can input code or other languages
Hint:If find spelling error, You need to correct it,1 by 1 or ignore it (code area won't be checked).
X-position of the mouse cursor
Y-position of the mouse cursor
Y-position of the mouse cursor
Testcursor
caretPos
Attachment:===
Asked by rwniceing
at 2024-09-10 07:01:10
Point:500 Replies:27 POST_ID:829231USER_ID:12079
Topic:
Linux;Network Operations;PHP Scripting Language
After root login, I set access right for non-root users using socket on php script as following command:
setcap 'cap_net_raw=+ep' /usr/local/bin/php
And then run the command at linux shell:
otheruser#php socket-example-1.php
It works without any previous permission error, but I tried run it on browser that doesn't work, so which setting in php.ini I need to set for that ? And I run phpinfo() on browser and see Socket Support is enabled, why it is still not working ?
I tried on php.ini with uncomment or comment extension=php_sockets.dll or extension=php_sockets.so for window and linux both don't work but socket is still enabled from phpinfo() output on browser. So which setting for enabling socket on php for linux shell and browser ?
(Note: this link describes the socket is enabled with compiling with configuration option during installation , http://php.net/manual/en/sockets.installation.php)
Please adivse
setcap 'cap_net_raw=+ep' /usr/local/bin/php
And then run the command at linux shell:
otheruser#php socket-example-1.php
It works without any previous permission error, but I tried run it on browser that doesn't work, so which setting in php.ini I need to set for that ? And I run phpinfo() on browser and see Socket Support is enabled, why it is still not working ?
I tried on php.ini with uncomment or comment extension=php_sockets.dll or extension=php_sockets.so for window and linux both don't work but socket is still enabled from phpinfo() output on browser. So which setting for enabling socket on php for linux shell and browser ?
(Note: this link describes the socket is enabled with compiling with configuration option during installation , http://php.net/manual/en/sockets.installation.php)
Please adivse
Expert: gheist replied at 2024-09-11 16:07:34
me no wikipedia.... sorry
Author: rwniceing replied at 2024-09-11 16:03:45
Gheist, what is different btw running it on host and guest ? and any articles mention or describe it on internet ? Please advise
Expert: gheist replied at 2024-09-11 15:56:29
selinux does not run on OpenVZ host. It runs on guests just fine, like antivirus on windows guests....
Author: rwniceing replied at 2024-09-11 15:32:53
Thanks for all of your reply, it seems it is solved at
http://www.experts-exchange.com/OS/Linux/Q_28516844.html#a40318250
Please comment you agree it or not that hosting company has ability to restrict VPS users to enable Selinux
http://www.experts-exchange.com/OS/Linux/Q_28516844.html#a40318250
Please comment you agree it or not that hosting company has ability to restrict VPS users to enable Selinux
Author: rwniceing replied at 2024-09-11 12:35:37
gr8gonzo, here it is,
on the browser message
=====================
socket_create() failed: reason: Operation not permitted
on the browser message
=====================
socket_create() failed: reason: Operation not permitted
$socket = socket_create(AF_INET, SOCK_RAW, 1); if ($socket === false) { echo "socket_create() failed: reason: " . socket_strerror(socket_last_error()) . "<br/>";} else { echo "OK.";} 1:2:3:4:5:6:
Apache module for php, you mean it is called mod_php, right ? I also attached my phpinfo() information
on the previous posts. Please take a look it.
Since my VPS account was used before for Cpanel which is expired in last year, do you think it is issue ?
Expert: gheist replied at 2024-09-11 09:03:35
Raw sockets are root-only (or more accurately can be added as capability to others), for good reason.
Assisted Solution
Expert: gr8gonzo replied at 2024-09-11 07:52:56
62 points EXCELLENT
912 is the size of the output in bytes.
You can have more than one PHP installation on a system. There's a chance that running the version on the command line has the capability to run the script, while the Apache module is using a separate version.
Can you post your PHP code? Echoing your custom message does not give information about why it failed. You should turn on PHP's error reporting / display / logging so you can see the actual reason it's failing.
You can have more than one PHP installation on a system. There's a chance that running the version on the command line has the capability to run the script, while the Apache module is using a separate version.
Can you post your PHP code? Echoing your custom message does not give information about why it failed. You should turn on PHP's error reporting / display / logging so you can see the actual reason it's failing.
Expert: gheist replied at 2024-09-11 07:47:14
When PHP is called in apache it is either php-cgi or apache httpd.
I dont thing you want universal raw socket capability on later.
I dont thing you want universal raw socket capability on later.
Author: rwniceing replied at 2024-09-11 07:34:38
just echo my message I made or set in php script that is "socket is not created" on browser , and echo "socket is created" on linux shell
And on the apache log , it seem http 200 is okay and no any issue but I don't know what is 992
68.77.3.144 - - [11/Sep/2014:22:32:08 +0800] "GET /tools/tcpip/ping.php HTTP/1.1" 200 912 "http://mysite.com/tools/tcpip/ping.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.103 Safari/537.36"
Be reminded, on linux shell run "php ping.php" that is working at root access or non-root account after setcap 'cap_net_raw=+ep' /usr/local/bin/php
Now i'm trying this link instruction at http://www.cyberciti.biz/faq/how-to-enable-selinux/ for enabling selinux
And on the apache log , it seem http 200 is okay and no any issue but I don't know what is 992
68.77.3.144 - - [11/Sep/2014:22:32:08 +0800] "GET /tools/tcpip/ping.php HTTP/1.1" 200 912 "http://mysite.com/tools/tcpip/ping.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.103 Safari/537.36"
Be reminded, on linux shell run "php ping.php" that is working at root access or non-root account after setcap 'cap_net_raw=+ep' /usr/local/bin/php
Now i'm trying this link instruction at http://www.cyberciti.biz/faq/how-to-enable-selinux/ for enabling selinux
Assisted Solution
Expert: gr8gonzo replied at 2024-09-11 06:27:10
62 points EXCELLENT
When you said the script doesn't work in the browser, what happens? Do you get an error? Do you have error logging or reporting turned on so you can capture the error (in case you don't get an error message)?
Author: rwniceing replied at 2024-09-11 04:06:07
before doing that just make sure what you said
my linux is linux distribution version , CentOS6 which is installed from my VPS hosting company.
What you mean is the original CENTOS with Selinux is enabled by default and will deny PHP socket
connection so that I can not run php socket in php script on linux shell and browser.
Now selinux is disabled so that I can run the php socket on linux shell but can't run it on browser becoz of
selinux is disabled
Please advise
my linux is linux distribution version , CentOS6 which is installed from my VPS hosting company.
What you mean is the original CENTOS with Selinux is enabled by default and will deny PHP socket
connection so that I can not run php socket in php script on linux shell and browser.
Now selinux is disabled so that I can run the php socket on linux shell but can't run it on browser becoz of
selinux is disabled
Please advise
Assisted Solution
Expert: gheist replied at 2024-09-11 04:02:37
62 points EXCELLENT
Enable selinux: make sure you set /etc/sysconfig/selinux to permissive where it says "enforcing"
Enable restorecond and auditd services
And do autorelabel as in your hoster's guide/
Enable restorecond and auditd services
And do autorelabel as in your hoster's guide/
Assisted Solution
Expert: gheist replied at 2024-09-11 03:55:15
62 points EXCELLENT
You need to ask your hosting company. Your system image is so far from CentOS that it is hard to cope with it.
On generic CentOS system SELinux is enabled by default and denies PHP socket connections.
You dont have selinux enabled(or if it is enabled you have incomplete tooling for it, so you cannot check whatsup), nor you have centos PHP.
Let this Q hang around a bit, it takes day round for all experts interested to see it.
On generic CentOS system SELinux is enabled by default and denies PHP socket connections.
You dont have selinux enabled(or if it is enabled you have incomplete tooling for it, so you cannot check whatsup), nor you have centos PHP.
Let this Q hang around a bit, it takes day round for all experts interested to see it.
Author: rwniceing replied at 2024-09-11 03:55:11
Finslly ,Now I've install selinux-policy-targeted, config file and targeted/ is existed now.
Could you explain more about this as follows before I enabel selinux ?
The enabling selinux will damage some where on my system ?
Could you explain more about this as follows before I enabel selinux ?
The enabling selinux will damage some where on my system ?
Instructions are for RHEL5, you need to install selinux-policy-targeted fro them to work.
If you enable selinux their way it will log all violations of policy instead of denying
If you enable selinux their way it will log all violations of policy instead of denying
Author: rwniceing replied at 2024-09-11 03:48:05
Could you explain more what you mean as follows ? Thanks
Please get hold of CentOS's PHP and get rid of backyard build you have there.
nobody ever can support such PHP you have there.
nobody ever can support such PHP you have there.
Author: rwniceing replied at 2024-09-11 03:42:38
I am using mod_php5 at the last word of the following code
Loaded Modules core mod_authn_file mod_authn_default mod_authz_host mod_authz_groupfile mod_authz_user mod_authz_default mod_auth_basic mod_include mod_filter mod_deflate mod_log_config mod_logio mod_env mod_expires mod_headers mod_unique_id mod_setenvif mod_version mod_ssl prefork http_core mod_mime mod_status mod_autoindex mod_asis mod_info mod_suexec mod_cgi mod_negotiation mod_dir mod_actions mod_userdir mod_alias mod_rewrite mod_so mod_fastinclude mod_bwlimited mod_ruid2 mod_php5 1:
Author: rwniceing replied at 2024-09-11 03:36:17
which file sentence you find that on phpinfo output ?
How to remove it ? I think it is done from my hosting company ?
How to remove it ? I think it is done from my hosting company ?
Expert: gheist replied at 2024-09-11 03:33:55
Please get hold of CentOS's PHP and get rid of backyard build you have there.
nobody ever can support such PHP you have there.
nobody ever can support such PHP you have there.
Author: rwniceing replied at 2024-09-11 03:31:19
I followed the instruction from "installation selinux linux CENTOS6 " searched in google that should be okay
for installation, and then follow the wrong link for RedL5 to enable selinux.
Do I need to re-install selinux again ?
root@vps [/etc/selinux]# sestatus
SELinux status: disabled
root@vps [/etc/selinux]# gentenforce
-bash: gentenforce: command not found
root@vps [/etc/selinux]# uname -a
Linux vps.mysite.com 2.6.32-042stab092.1 #1 SMP Tue Jun 24 09:10:28 MSK 2014 x86_64 x86_64 x86_64 GNU/Linux
my phpinfo() output on browser
==========================
for installation, and then follow the wrong link for RedL5 to enable selinux.
Do I need to re-install selinux again ?
root@vps [/etc/selinux]# sestatus
SELinux status: disabled
root@vps [/etc/selinux]# gentenforce
-bash: gentenforce: command not found
root@vps [/etc/selinux]# uname -a
Linux vps.mysite.com 2.6.32-042stab092.1 #1 SMP Tue Jun 24 09:10:28 MSK 2014 x86_64 x86_64 x86_64 GNU/Linux
my phpinfo() output on browser
==========================
PHP Version 5.3.21System Linux vps.mysite.com 2.6.32-042stab092.1 #1 SMP Tue Jun 24 09:10:28 MSK 2014 x86_64Build Date Feb 4 2013 12:35:34Configure Command './configure' '--disable-fileinfo' '--disable-phar' '--enable-bcmath' '--enable-calendar' '--enable-exif' '--enable-ftp' '--enable-gd-native-ttf' '--enable-libxml' '--enable-magic-quotes' '--enable-mbstring' '--enable-pdo=shared' '--enable-soap' '--enable-sockets' '--enable-wddx' '--enable-zend-multibyte' '--enable-zip' '--prefix=/usr/local' '--with-apxs2=/usr/local/apache/bin/apxs' '--with-bz2' '--with-curl=/opt/curlssl/' '--with-curlwrappers' '--with-freetype-dir=/usr' '--with-gd' '--with-gettext' '--with-imap=/opt/php_with_imap_client/' '--with-imap-ssl=/usr' '--with-jpeg-dir=/usr' '--with-kerberos' '--with-libdir=lib64' '--with-libexpat-dir=/usr' '--with-libxml-dir=/opt/xml2' '--with-libxml-dir=/opt/xml2/' '--with-mcrypt=/opt/libmcrypt/' '--with-mysql=/usr' '--with-mysql-sock=/var/lib/mysql/mysql.sock' '--with-mysqli=/usr/bin/mysql_config' '--with-openssl=/usr' '--with-openssl-dir=/usr' '--with-pcre-regex=/opt/pcre' '--with-pdo-mysql=shared' '--with-pdo-sqlite=shared' '--with-pic' '--with-png-dir=/usr' '--with-pspell' '--with-sqlite=shared' '--with-tidy=/opt/tidy/' '--with-xmlrpc' '--with-xpm-dir=/usr' '--with-xsl=/opt/xslt/' '--with-zlib' '--with-zlib-dir=/usr'Server API Apache 2.0 HandlerVirtual Directory Support disabledConfiguration File (php.ini) Path /usr/local/libLoaded Configuration File /usr/local/lib/php.iniScan this dir for additional .ini files (none)Additional .ini files parsed (none)PHP API 20090626PHP Extension 20090626Zend Extension 220090626Zend Extension Build API220090626,NTSPHP Extension Build API20090626,NTSDebug Build noThread Safety disabledZend Memory Manager enabledZend Multibyte Support enabledIPv6 Support enabledRegistered PHP Streams compress.zlib, compress.bzip2, dict, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smtp, smtps, telnet, tftp, php, file, glob, data, zipRegistered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tlsRegistered Stream Filters zlib.*, bzip2.*, convert.iconv.*, mcrypt.*, mdecrypt.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, dechunkZend logo This program makes use of the Zend Scripting Language Engine:Zend Engine v2.3.0, Copyright (c) 1998-2013 Zend Technologies with eAccelerator v0.9.6.1, Copyright (c) 2004-2010 eAccelerator, by eAccelerator with the ionCube PHP Loader v4.2.2, Copyright (c) 2002-2012, by ionCube Ltd., and with Zend Guard Loader v3.3, Copyright (c) 1998-2010, by Zend TechnologiesPHP CreditsConfigurationapache2handlerApache Version Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_bwlimited/1.4 PHP/5.3.21Apache API Version 20051115Server Administrator webmaster@mysite.comHostname:Port mysite.com:0User/Group nobody(99)/99Max Requests Per Child: 10000 - Keep Alive: on - Max Per Connection: 100Timeouts Connection: 300 - Keep-Alive: 5Virtual Server YesServer Root /usr/local/apacheLoaded Modules core mod_authn_file mod_authn_default mod_authz_host mod_authz_groupfile mod_authz_user mod_authz_default mod_auth_basic mod_include mod_filter mod_deflate mod_log_config mod_logio mod_env mod_expires mod_headers mod_unique_id mod_setenvif mod_version mod_ssl prefork http_core mod_mime mod_status mod_autoindex mod_asis mod_info mod_suexec mod_cgi mod_negotiation mod_dir mod_actions mod_userdir mod_alias mod_rewrite mod_so mod_fastinclude mod_bwlimited mod_ruid2 mod_php5Directive Local Value Master Valueengine 1 1last_modified 0 0xbithack 0 0Apache EnvironmentVariable ValueUNIQUE_ID VBF2otQB0fIAAAMbMjkAAAAESCRIPT_URL /data/php/phpinfo.phpSCRIPT_URI http://68.1.123.123/data/php/phpinfo.phpHTTP_HOST 68.1.123.123HTTP_CONNECTION keep-aliveHTTP_ACCEPT text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8HTTP_USER_AGENT Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.103 Safari/537.36HTTP_ACCEPT_ENCODING gzip,deflate,sdchHTTP_ACCEPT_LANGUAGE en-US,en;q=0.8,zh-TW;q=0.6,zh;q=0.4HTTP_COOKIE PHPSESSID=f8815796b9cff537949d6005702cfc82PATH /sbin:/usr/sbin:/bin:/usr/binSERVER_SIGNATURE <address>Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_bwlimited/1.4 PHP/5.3.21 Server at 68.1.123.123 Port 80</address>SERVER_SOFTWARE Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_bwlimited/1.4 PHP/5.3.21SERVER_NAME 68.1.123.123SERVER_ADDR 68.1.123.123SERVER_PORT 80REMOTE_ADDR 212.1.2.137DOCUMENT_ROOT /home/mysite/public_htmlSERVER_ADMIN webmaster@mysite.comSCRIPT_FILENAME /home/mysite/public_html/data/php/phpinfo.phpREMOTE_PORT 30599GATEWAY_INTERFACE CGI/1.1SERVER_PROTOCOL HTTP/1.1REQUEST_METHOD GETQUERY_STRING no valueREQUEST_URI /data/php/phpinfo.phpSCRIPT_NAME /data/php/phpinfo.phpHTTP Headers InformationHTTP Request HeadersHTTP Request GET /data/php/phpinfo.php HTTP/1.1Host 68.1.123.123Connection keep-aliveAccept text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.103 Safari/537.36Accept-Encoding gzip,deflate,sdchAccept-Language en-US,en;q=0.8,zh-TW;q=0.6,zh;q=0.4Cookie PHPSESSID=f8815796b9cff537949d6005702cfc82HTTP Response HeadersX-Powered-By PHP/5.3.21Keep-Alive timeout=5, max=100Connection Keep-AliveTransfer-Encoding chunkedContent-Type text/htmlapcAPC Support enabledVersion 3.1.13APC Debugging DisabledMMAP Support EnabledMMAP File Mask no valueLocking type pthread read/write LocksSerialization Support phpRevision $Revision: 327136 $Build Date Feb 4 2013 12:46:33Directive Local Value Master Valueapc.cache_by_default On Onapc.canonicalize On Onapc.coredump_unmap Off Offapc.enable_cli Off Offapc.enabled On Onapc.file_md5 Off Offapc.file_update_protection 2 2apc.filters no value no valueapc.gc_ttl 3600 3600apc.include_once_override Off Offapc.lazy_classes Off Offapc.lazy_functions Off Offapc.max_file_size 1M 1Mapc.mmap_file_mask no value no valueapc.num_files_hint 1000 1000apc.preload_path no value no valueapc.report_autofilter Off Offapc.rfc1867 Off Offapc.rfc1867_freq 0 0apc.rfc1867_name APC_UPLOAD_PROGRESS APC_UPLOAD_PROGRESSapc.rfc1867_prefix upload_ upload_apc.rfc1867_ttl 3600 3600apc.serializer default defaultapc.shm_segments 1 1apc.shm_size 32M 32Mapc.slam_defense On Onapc.stat On Onapc.stat_ctime Off Offapc.ttl 0 0apc.use_request_time On Onapc.user_entries_hint 4096 4096apc.user_ttl 0 0apc.write_lock On OnbcmathBCMath support enabledDirective Local Value Master Valuebcmath.scale 0 0bz2BZip2 Support EnabledStream Wrapper support compress.bzip2://Stream Filter support bzip2.decompress, bzip2.compressBZip2 Version 1.0.5, 10-Dec-2007calendarCalendar support enabledCorePHP Version 5.3.21Directive Local Value Master Valueallow_call_time_pass_reference On Onallow_url_fopen On Onallow_url_include Off Offalways_populate_raw_post_data Off Offarg_separator.input & &arg_separator.output & &asp_tags Off Offauto_append_file no value no valueauto_globals_jit On Onauto_prepend_file no value no valuebrowscap no value no valuedefault_charset no value no valuedefault_mimetype text/html text/htmldefine_syslog_variables Off Offdetect_unicode On Ondisable_classes no value no valuedisable_functions no value no valuedisplay_errors On Ondisplay_startup_errors Off Offdoc_root no value no valuedocref_ext no value no valuedocref_root no value no valueenable_dl On Onerror_append_string no value no valueerror_log error_log error_logerror_prepend_string no value no valueerror_reporting 22519 22519exit_on_timeout Off Offexpose_php On Onextension_dir /usr/local/lib/php/extensions/no-debug-non-zts-20090626 /usr/local/lib/php/extensions/no-debug-non-zts-20090626file_uploads On Onhighlight.bg #FFFFFF #FFFFFFhighlight.comment #FF8000 #FF8000highlight.default #0000BB #0000BBhighlight.html #000000 #000000highlight.keyword #007700 #007700highlight.string #DD0000 #DD0000html_errors On Onignore_repeated_errors Off Offignore_repeated_source Off Offignore_user_abort Off Offimplicit_flush Off Offinclude_path .:/usr/lib/php:/usr/local/lib/php .:/usr/lib/php:/usr/local/lib/phplog_errors On Onlog_errors_max_len 1024 1024magic_quotes_gpc On Onmagic_quotes_runtime Off Offmagic_quotes_sybase Off Offmail.add_x_header Off Offmail.force_extra_parameters no value no valuemail.log no value no valuemax_execution_time 30 30max_file_uploads 20 20max_input_nesting_level 64 64max_input_time 60 60max_input_vars 1000 1000memory_limit 1532M 1532Mopen_basedir no value no valueoutput_buffering no value no valueoutput_handler no value no valuepost_max_size 8M 8Mprecision 12 12realpath_cache_size 16K 16Krealpath_cache_ttl 120 120register_argc_argv On Onregister_globals Off Offregister_long_arrays On Onreport_memleaks On Onreport_zend_debug On Onrequest_order no value no valuesafe_mode Off Offsafe_mode_exec_dir /usr/local/php/bin /usr/local/php/binsafe_mode_gid Off Offsafe_mode_include_dir no value no valuesendmail_from no value no valuesendmail_path /usr/sbin/sendmail -t -i /usr/sbin/sendmail -t -iserialize_precision 100 100short_open_tag On OnSMTP localhost localhostsmtp_port 25 25sql.safe_mode Off Offtrack_errors Off Offunserialize_callback_func no value no valueupload_max_filesize 6M 6Mupload_tmp_dir no value no valueuser_dir no value no valueuser_ini.cache_ttl 300 300user_ini.filename .user.ini .user.inivariables_order EGPCS EGPCSxmlrpc_error_number 0 0xmlrpc_errors Off Offy2k_compliance On Onzend.enable_gc On Onctypectype functions enabledcurlcURL support enabledcURL Information 7.24.0Age 3FeaturesAsynchDNS NoDebug NoGSS-Negotiate NoIDN YesIPv6 YesLargefile YesNTLM YesSPNEGO NoSSL YesSSPI Nokrb4 Nolibz YesCharConv NoProtocols dict, file, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smtp, smtps, telnet, tftpHost x86_64-unknown-linux-gnuSSL Version OpenSSL/1.0.0ZLib Version 1.2.3datedate/time support enabled"Olson" Timezone Database Version 2012.10Timezone Database internalDefault timezone Asia/Hong_KongDirective Local Value Master Valuedate.default_latitude 31.7667 31.7667date.default_longitude 35.2333 35.2333date.sunrise_zenith 90.583333 90.583333date.sunset_zenith 90.583333 90.583333date.timezone Asia/Hong_Kong Asia/Hong_KongdomDOM/XML enabledDOM/XML API Version 20031129libxml Version 2.9.0HTML Support enabledXPath Support enabledXPointer Support enabledSchema Support enabledRelaxNG Support enabledeAcceleratoreAccelerator support enabledVersion 0.9.6.1Caching Enabled trueOptimizer Enabled trueCheck mtime Enabled trueMemory Size 16,777,144 BytesMemory Available 16,765,848 BytesMemory Allocated 11,296 BytesCached Scripts 2Removed Scripts 0Directive Local Value Master Valueeaccelerator.allowed_admin_path no value no valueeaccelerator.cache_dir /tmp/eaccelerator /tmp/eacceleratoreaccelerator.check_mtime 1 1eaccelerator.debug 0 0eaccelerator.enable 1 1eaccelerator.filter no value no valueeaccelerator.log_file no value no valueeaccelerator.optimizer 1 1eaccelerator.shm_max 0 0eaccelerator.shm_only 0 0eaccelerator.shm_prune_period 0 0eaccelerator.shm_size 16 16eaccelerator.shm_ttl 0 0eregRegex Library Bundled library enabledexifEXIF Support enabledEXIF Version 1.4 $Id$Supported EXIF Version 0220Supported filetypes JPEG,TIFFDirective Local Value Master Valueexif.decode_jis_intel JIS JISexif.decode_jis_motorola JIS JISexif.decode_unicode_intel UCS-2LE UCS-2LEexif.decode_unicode_motorola UCS-2BE UCS-2BEexif.encode_jis no value no valueexif.encode_unicode ISO-8859-15 ISO-8859-15filterInput Validation and Filtering enabledRevision $Id: 209a1c3c98c04a5474846e7bbe8ca72054ccfd4f $Directive Local Value Master Valuefilter.default unsafe_raw unsafe_rawfilter.default_flags no value no valueftpFTP support enabledgdGD Support enabledGD Version bundled (2.0.34 compatible)FreeType Support enabledFreeType Linkage with freetypeFreeType Version 2.3.11GIF Read Support enabledGIF Create Support enabledJPEG Support enabledlibJPEG Version 6bPNG Support enabledlibPNG Version 1.2.49WBMP Support enabledXPM Support enabledlibXpm Version 30411XBM Support enabledDirective Local Value Master Valuegd.jpeg_ignore_warning 0 0gettextGetText Support enabledhashhash support enabledHashing Engines md2 md4 md5 sha1 sha224 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru snefru256 gost adler32 crc32 crc32b salsa10 salsa20 haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5iconviconv support enablediconv implementation glibciconv library version 2.12Directive Local Value Master Valueiconv.input_encoding ISO-8859-1 ISO-8859-1iconv.internal_encoding ISO-8859-1 ISO-8859-1iconv.output_encoding ISO-8859-1 ISO-8859-1imapIMAP c-Client Version 2007fSSL Support enabledKerberos Support enabledjsonjson support enabledjson version 1.2.1libxmllibXML support activelibXML Compiled Version 2.9.0libXML Loaded Version 20900libXML streams enabledmbstringMultibyte Support enabledMultibyte string engine libmbflHTTP input encoding translation disabledmbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.Multibyte (japanese) regex support enabledMultibyte regex (oniguruma) backtrack check OnMultibyte regex (oniguruma) version 4.7.1Directive Local Value Master Valuembstring.detect_order no value no valuembstring.encoding_translation Off Offmbstring.func_overload 0 0mbstring.http_input pass passmbstring.http_output pass passmbstring.http_output_conv_mimetypes ^(text/|application/xhtml+xml) ^(text/|application/xhtml+xml)mbstring.internal_encoding no value no valuembstring.language neutral neutralmbstring.script_encoding no value no valuembstring.strict_detection Off Offmbstring.substitute_character no value no valuemcryptmcrypt support enabledmcrypt_filter support enabledVersion 2.5.8Api No 20021217Supported ciphers cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256 serpent xtea blowfish enigma rc2 tripledesSupported modes cbc cfb ctr ecb ncfb nofb ofb streamDirective Local Value Master Valuemcrypt.algorithms_dir no value no valuemcrypt.modes_dir no value no valuememcachememcache support enabledActive persistent connections 0Version 2.2.7Revision $Revision: 327750 $Directive Local Value Master Valuememcache.allow_failover 1 1memcache.chunk_size 8192 8192memcache.default_port 11211 11211memcache.default_timeout_ms 1000 1000memcache.hash_function crc32 crc32memcache.hash_strategy standard standardmemcache.max_failover_attempts 20 20mysqlMySQL Support enabledActive Persistent Links 0Active Links 0Client API version 5.1.68MYSQL_MODULE_TYPE externalMYSQL_SOCKET /var/lib/mysql/mysql.sockMYSQL_INCLUDE -I/usr/include/mysqlMYSQL_LIBS -L/usr/lib64 -lmysqlclientDirective Local Value Master Valuemysql.allow_local_infile On Onmysql.allow_persistent On Onmysql.connect_timeout 60 60mysql.default_host no value no valuemysql.default_password no value no valuemysql.default_port no value no valuemysql.default_socket /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sockmysql.default_user no value no valuemysql.max_links Unlimited Unlimitedmysql.max_persistent Unlimited Unlimitedmysql.trace_mode Off OffmysqliMysqlI Support enabledClient API library version 5.1.68Active Persistent Links 0Inactive Persistent Links 0Active Links 0Client API header version 5.1.66MYSQLI_SOCKET /var/lib/mysql/mysql.sockDirective Local Value Master Valuemysqli.allow_local_infile On Onmysqli.allow_persistent On Onmysqli.default_host no value no valuemysqli.default_port 3306 3306mysqli.default_pw no value no valuemysqli.default_socket /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sockmysqli.default_user no value no valuemysqli.max_links Unlimited Unlimitedmysqli.max_persistent Unlimited Unlimitedmysqli.reconnect Off OffopensslOpenSSL support enabledOpenSSL Library Version OpenSSL 1.0.0-fips 29 Mar 2010OpenSSL Header Version OpenSSL 1.0.0-fips 29 Mar 2010pcrePCRE (Perl Compatible Regular Expressions) Support enabledPCRE Library Version 8.21 2011-12-12Directive Local Value Master Valuepcre.backtrack_limit 1000000 1000000pcre.recursion_limit 100000 100000PDOPDO support enabledPDO drivers sqlite, sqlite2, mysqlpdo_mysqlPDO Driver for MySQL enabledClient API version 5.1.68Directive Local Value Master Valuepdo_mysql.default_socket /var/lib/mysql/mysql.sock /var/lib/mysql/mysql.sockpdo_sqlitePDO Driver for SQLite 3.x enabledSQLite Library 3.7.7.1posixRevision $Id: 5a2da3946b96c5afbf3aff8db8a8681f8bedee85 $pspellPSpell Support enabledReflectionReflection enabledVersion $Id: 4af6c4c676864b1c0bfa693845af0688645c37cf $sessionSession Support enabledRegistered save handlers files user sqlite memcacheRegistered serializer handlers php php_binary wddxDirective Local Value Master Valuesession.auto_start Off Offsession.bug_compat_42 On Onsession.bug_compat_warn On Onsession.cache_expire 180 180session.cache_limiter nocache nocachesession.cookie_domain no value no valuesession.cookie_httponly Off Offsession.cookie_lifetime 0 0session.cookie_path / /session.cookie_secure Off Offsession.entropy_file no value no valuesession.entropy_length 0 0session.gc_divisor 100 100session.gc_maxlifetime 1440 1440session.gc_probability 1 1session.hash_bits_per_character 4 4session.hash_function 0 0session.name PHPSESSID PHPSESSIDsession.referer_check no value no valuesession.save_handler files filessession.save_path /tmp /tmpsession.serialize_handler php phpsession.use_cookies On Onsession.use_only_cookies On Onsession.use_trans_sid 0 0SimpleXMLSimplexml support enabledRevision $Id: 02ab7893b36d51e9c59da77d7e287eb3b35e1e32 $Schema support enabledsoapSoap Client enabledSoap Server enabledDirective Local Value Master Valuesoap.wsdl_cache 1 1soap.wsdl_cache_dir /tmp /tmpsoap.wsdl_cache_enabled 1 1soap.wsdl_cache_limit 5 5soap.wsdl_cache_ttl 86400 86400socketsSockets Support enabledSPLSPL support enabledInterfaces Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubjectClasses AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, DirectoryIterator, DomainException, EmptyIterator, FilesystemIterator, FilterIterator, GlobIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, MultipleIterator, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RecursiveTreeIterator, RegexIterator, RuntimeException, SplDoublyLinkedList, SplFileInfo, SplFileObject, SplFixedArray, SplHeap, SplMinHeap, SplMaxHeap, SplObjectStorage, SplPriorityQueue, SplQueue, SplStack, SplTempFileObject, UnderflowException, UnexpectedValueExceptionSQLiteSQLite support enabledPECL Module version 2.0-dev $Id$SQLite Library 2.8.17SQLite Encoding iso8859Directive Local Value Master Valuesqlite.assoc_case 0 0sqlite3SQLite3 support enabledSQLite3 module version 0.7-devSQLite Library 3.7.7.1Directive Local Value Master Valuesqlite3.extension_dir no value no valuestandardDynamic Library Support enabledPath to sendmail /usr/sbin/sendmail -t -iDirective Local Value Master Valueassert.active 1 1assert.bail 0 0assert.callback no value no valueassert.quiet_eval 0 0assert.warning 1 1auto_detect_line_endings 0 0default_socket_timeout 60 60from no value no valuesafe_mode_allowed_env_vars PHP_ PHP_safe_mode_protected_env_vars LD_LIBRARY_PATH LD_LIBRARY_PATHurl_rewriter.tags a=href,area=href,frame=src,input=src,form=,fieldset= a=href,area=href,frame=src,input=src,form=,fieldset=user_agent no value no valuetidyTidy support enabledlibTidy Release 25 March 2009Extension Version 2.0 ($Id$)Directive Local Value Master Valuetidy.clean_output 0 0tidy.default_config no value no valuetokenizerTokenizer Support enabledwddxWDDX Support enabledWDDX Session Serializer enabledxmlXML Support activeXML Namespace Support activeEXPAT Version expat_2.0.1xmlreaderXMLReader enabledxmlrpccore library version xmlrpc-epi v. 0.51php extension version 0.51author Dan Libbyhomepage http://xmlrpc-epi.sourceforge.netopen sourced by Epinions.comxmlwriterXMLWriter enabledxslXSL enabledlibxslt Version 1.1.27libxslt compiled against libxml Version 2.9.0EXSLT enabledlibexslt Version 1.1.27Zend Guard LoaderZend Guard Loader enabledLicense Path no valueObfuscation level 3zipZip enabledExtension Version $Id: bdd35a2ede0347a3df239de1e7dc5d7e588f00c3 $Zip version 1.11.0Libzip version 0.10.1zlibZLib Support enabledStream Wrapper support compress.zlib://Stream Filter support zlib.inflate, zlib.deflateCompiled Version 1.2.3Linked Version 1.2.3Directive Local Value Master Valuezlib.output_compression Off Offzlib.output_compression_level -1 -1zlib.output_handler no value no valueAdditional ModulesModule NameionCube LoaderEnvironmentVariable ValueTERM linuxLD_LIBRARY_PATH /usr/local/apache/libPATH /sbin:/usr/sbin:/bin:/usr/binRUNLEVEL 3runlevel 3PWD /LANGSH_SOURCED 1LANG en_US.UTF-8PREVLEVEL Nprevious NCONSOLETYPE serialSHLVL 2UPSTART_INSTANCE no valueUPSTART_EVENTS runlevelUPSTART_JOB rc_ /usr/local/apache/bin/httpdPHP VariablesVariable Value_REQUEST["PHPSESSID"] f8815796b9cff537949d6005702cfc82_COOKIE["PHPSESSID"] f8815796b9cff537949d6005702cfc82_SERVER["UNIQUE_ID"] VBF2otQB0fIAAAMbMjkAAAAE_SERVER["SCRIPT_URL"] /data/php/phpinfo.php_SERVER["SCRIPT_URI"] http://68.1.123.123/data/php/phpinfo.php_SERVER["HTTP_HOST"] 68.1.123.123_SERVER["HTTP_CONNECTION"] keep-alive_SERVER["HTTP_ACCEPT"] text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8_SERVER["HTTP_USER_AGENT"] Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.103 Safari/537.36_SERVER["HTTP_ACCEPT_ENCODING"] gzip,deflate,sdch_SERVER["HTTP_ACCEPT_LANGUAGE"] en-US,en;q=0.8,zh-TW;q=0.6,zh;q=0.4_SERVER["HTTP_COOKIE"] PHPSESSID=f8815796b9cff537949d6005702cfc82_SERVER["PATH"] /sbin:/usr/sbin:/bin:/usr/bin_SERVER["SERVER_SIGNATURE"] <address>Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_bwlimited/1.4 PHP/5.3.21 Server at 68.1.123.123 Port 80</address>_SERVER["SERVER_SOFTWARE"] Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_bwlimited/1.4 PHP/5.3.21_SERVER["SERVER_NAME"] 68.1.123.123_SERVER["SERVER_ADDR"] 68.1.123.123_SERVER["SERVER_PORT"] 80_SERVER["REMOTE_ADDR"] 212.1.2.137_SERVER["DOCUMENT_ROOT"] /home/mysite/public_html_SERVER["SERVER_ADMIN"] webmaster@mysite.com_SERVER["SCRIPT_FILENAME"] /home/mysite/public_html/data/php/phpinfo.php_SERVER["REMOTE_PORT"] 30599_SERVER["GATEWAY_INTERFACE"] CGI/1.1_SERVER["SERVER_PROTOCOL"] HTTP/1.1_SERVER["REQUEST_METHOD"] GET_SERVER["QUERY_STRING"] no value_SERVER["REQUEST_URI"] /data/php/phpinfo.php_SERVER["SCRIPT_NAME"] /data/php/phpinfo.php_SERVER["PHP_SELF"] /data/php/phpinfo.php_SERVER["REQUEST_TIME"] 1410430626_SERVER["argv"]Array()_SERVER["argc"] 0_ENV["TERM"] linux_ENV["LD_LIBRARY_PATH"] /usr/local/apache/lib_ENV["PATH"] /sbin:/usr/sbin:/bin:/usr/bin_ENV["RUNLEVEL"] 3_ENV["runlevel"] 3_ENV["PWD"] /_ENV["LANGSH_SOURCED"] 1_ENV["LANG"] en_US.UTF-8_ENV["PREVLEVEL"] N_ENV["previous"] N_ENV["CONSOLETYPE"] serial_ENV["SHLVL"] 2_ENV["UPSTART_INSTANCE"] no value_ENV["UPSTART_EVENTS"] runlevel_ENV["UPSTART_JOB"] rc_ENV["_"] /usr/local/apache/bin/httpdPHP LicenseThis program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSEThis program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact license@php.net. 1:2:3:4:5:6:7:8:9:10:11:12:13:14:15:16:17:18:19:20:21:22:23:24:25:26:27:28:29:30:31:32:33:34:35:36:37:38:39:40:41:42:43:44:45:46:47:48:49:50:51:52:53:54:55:56:57:58:59:60:61:62:63:64:65:66:67:68:69:70:71:72:73:74:75:76:77:78:79:80:81:82:83:84:85:86:87:88:89:90:91:92:93:94:95:96:97:98:99:100:101:102:103:104:105:106:107:108:109:110:111:112:113:114:115:116:117:118:119:120:121:122:123:124:125:126:127:128:129:130:131:132:133:134:135:136:137:138:139:140:141:142:143:144:145:146:147:148:149:150:151:152:153:154:155:156:157:158:159:160:161:162:163:164:165:166:167:168:169:170:171:172:173:174:175:176:177:178:179:180:181:182:183:184:185:186:187:188:189:190:191:192:193:194:195:196:197:198:199:200:201:202:203:204:205:206:207:208:209:210:211:212:213:214:215:216:217:218:219:220:221:222:223:224:225:226:227:228:229:230:231:232:233:234:235:236:237:238:239:240:241:242:243:244:245:246:247:248:249:250:251:252:253:254:255:256:257:258:259:260:261:262:263:264:265:266:267:268:269:270:271:272:273:274:275:276:277:278:279:280:281:282:283:284:285:286:287:288:289:290:291:292:293:294:295:296:297:298:299:300:301:302:303:304:305:306:307:308:309:310:311:312:313:314:315:316:317:318:319:320:321:322:323:324:325:326:327:328:329:330:331:332:333:334:335:336:337:338:339:340:341:342:343:344:345:346:347:348:349:350:351:352:353:354:355:356:357:358:359:360:361:362:363:364:365:366:367:368:369:370:371:372:373:374:375:376:377:378:379:380:381:382:383:384:385:386:387:388:389:390:391:392:393:394:395:396:397:398:399:400:401:402:403:404:405:406:407:408:409:410:411:412:413:414:415:416:417:418:419:420:421:422:423:424:425:426:427:428:429:430:431:432:433:434:435:436:437:438:439:440:441:442:443:444:445:446:447:448:449:450:451:452:453:454:455:456:457:458:459:460:461:462:463:464:465:466:467:468:469:470:471:472:473:474:475:476:477:478:479:480:481:482:483:484:485:486:487:488:489:490:491:492:493:494:495:496:497:498:499:500:501:502:503:504:505:506:507:508:509:510:511:512:513:514:515:516:517:518:519:520:521:522:523:524:525:526:527:528:529:530:531:532:533:534:535:536:537:538:539:540:541:542:543:544:545:546:547:548:549:550:551:552:553:554:555:556:557:558:559:560:561:562:563:564:565:566:567:568:569:570:571:572:573:574:575:576:577:578:579:580:581:582:583:584:585:586:587:588:589:590:591:592:593:594:595:596:597:598:599:600:601:602:603:604:605:606:607:608:609:610:611:612:613:614:615:616:617:618:619:620:621:622:623:624:625:626:627:628:629:630:631:632:633:634:635:636:637:638:639:640:641:642:643:644:645:646:647:648:649:650:651:652:653:654:655:656:657:658:659:660:661:662:663:664:665:666:667:668:669:670:671:672:673:674:675:676:677:678:679:680:681:682:683:684:685:686:687:688:689:690:691:692:693:694:695:696:697:698:699:700:701:702:703:704:705:706:707:708:709:710:711:712:713:714:715:716:717:718:719:720:721:722:723:724:725:726:727:728:729:730:731:732:733:734:735:736:737:738:739:740:741:742:743:744:745:746:747:748:749:750:751:752:753:754:755:756:757:758:759:760:761:762:763:764:765:766:767:768:769:770:771:772:773:774:775:776:777:778:779:780:781:782:783:784:785:786:787:788:789:790:791:792:793:794:795:796:797:798:799:800:801:802:803:804:805:806:807:808:809:810:811:812:813:814:815:816:817:818:819:820:821:822:823:824:825:826:827:828:829:830:831:832:833:834:835:836:837:838:839:840:841:842:843:844:845:846:847:
Assisted Solution
Expert: gheist replied at 2024-09-11 03:15:55
63 points EXCELLENT
Instructions are for RHEL5, you need to install selinux-policy-targeted fro them to work.
If you enable selinux their way it will log all violations of policy instead of denying
Can you check "gentenforce" and "sestatus"? If either equals zero - selinux does not protect your system and no need to diagnose it.
first block in phpinfo() usually tells how PHP was activated.
If you enable selinux their way it will log all violations of policy instead of denying
Can you check "gentenforce" and "sestatus"? If either equals zero - selinux does not protect your system and no need to diagnose it.
first block in phpinfo() usually tells how PHP was activated.
Author: rwniceing replied at 2024-09-11 03:12:58
after comment extension=php_sockets.dll with ";" in /etc/lib/php.ini, and reboot the server,
audit2allow -a is still not working
root@vps [/etc/selinux]# audit2allow -a
unable to open /etc/selinux/targeted/policy/policy.-1: No such file or directory
audit2allow -a is still not working
root@vps [/etc/selinux]# audit2allow -a
unable to open /etc/selinux/targeted/policy/policy.-1: No such file or directory
Author: rwniceing replied at 2024-09-11 03:10:33
Is it related to my VPS account with my hosting company ?
When follow to this link at http://www.cyberciti.biz/faq/rhel-fedora-redhat-selinux-protection/
to enable Selinux
But I could NOT have /etc/selinux/config file
there only have this
root@vps [/etc/selinux]# ls
./ ../ restorecond.conf restorecond_user.conf semanage.conf
I need to care this config file ?
Where can I check
Please advise
When follow to this link at http://www.cyberciti.biz/faq/rhel-fedora-redhat-selinux-protection/
to enable Selinux
But I could NOT have /etc/selinux/config file
there only have this
root@vps [/etc/selinux]# ls
./ ../ restorecond.conf restorecond_user.conf semanage.conf
I need to care this config file ?
Where can I check
Do you use mod_php or php-cgi ?
?Please advise
Accepted Solution
Expert: gheist replied at 2024-09-11 02:59:37
63 points EXCELLENT
Selinux is disabled. Something else is at fault.
Do you use mod_php or php-cgi ?
Do you use mod_php or php-cgi ?
Author: rwniceing replied at 2024-09-11 02:48:09
root@vps [~]# audit2allow -a
unable to open /etc/selinux/targeted/policy/policy.-1: No such file or directory
root@vps [~]# setsebool -p variable true
setsebool: SELinux is disabled.
How to enable SELinux ? Please advise
unable to open /etc/selinux/targeted/policy/policy.-1: No such file or directory
root@vps [~]# setsebool -p variable true
setsebool: SELinux is disabled.
How to enable SELinux ? Please advise
Assisted Solution
Expert: gheist replied at 2024-09-11 00:21:37
63 points EXCELLENT
Install policycoreutils-python
then run audit-allow -a
it will show you variables to modify (setsebool -p variable true) to allow apache to connect using tcp. (Default is to deny)
then run audit-allow -a
it will show you variables to modify (setsebool -p variable true) to allow apache to connect using tcp. (Default is to deny)
Author: rwniceing replied at 2024-09-11 00:11:39
I am using Linux CentOS6 apache, what is selinux using for ? Please advise
Assisted Solution
Expert: gheist replied at 2024-09-10 21:03:34
63 points EXCELLENT
It could be selinux or apparmor blocking sockets coming from httpd.