From owner-freebsd-isp Wed Aug 7 5:55:41 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 14F9337B400 for ; Wed, 7 Aug 2002 05:55:40 -0700 (PDT) Received: from iota.root-servers.ch (iota.root-servers.ch [193.41.193.195]) by mx1.FreeBSD.org (Postfix) with SMTP id 7D61543E75 for ; Wed, 7 Aug 2002 05:55:38 -0700 (PDT) (envelope-from gaml@buz.ch) Received: (qmail 22562 invoked from network); 7 Aug 2002 12:55:36 -0000 Received: from dclient217-162-128-229.hispeed.ch (HELO gaxp1800) (217.162.128.229) by 0 with SMTP; 7 Aug 2002 12:55:36 -0000 Date: Wed, 7 Aug 2002 14:56:07 +0200 From: Gabriel Ambuehl X-Mailer: The Bat! (v1.60q) Educational Reply-To: Gabriel Ambuehl X-Priority: 3 (Normal) Message-ID: <4515979484.20020807145607@buz.ch> To: isp@freebsd.org Subject: Porting Apache 2 MPM perchild to FreeBSD. Raising funds? MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello, I'm kinda annoyed that MPM perchild, the by far coolest feature of Apache 2, doesn't work on FreeBSD. Basically, perchild would allow it to have Virtualhosts running under different UIDs than the mainserver which, how I understand the docs, would mean that we'd finally be able to run PHP and other DSOs under the UID of the user the Vhost belongs to meaning the safe_mode/open_basedir hacks in PHP would be obsolote. I think most of the ISPs who use vhosts on this list would have a big interest in getting this feature to work ASAP because it results in *greatly* increased security for shared webhosting environments. Now as it stands, the perchild doesn't work on FreeBSD (neither does the multi threaded worker) because of some issues how threading is implemented on FreeBSD. Now as pointed out above, we'd very much like to use the perchild features ASAP and we'd be willing to pay a certain amount to get a working FreeBSD version of it (our in house knowledge as to threading under Unix isn't good enough to try on our own) but we assume that other parties might have interests to see this happen soon and thus would be willing to help funding the development (maybe the FreeBSD Foundation could coordinate the project? Considering that FreeBSD is THE open server OS, a working Apache2 with enhanced security should be in their interest, too). The changes would get merged into the Apache base tree, of course. So basically, I'm asking for comments on this and if there are any parties that would be willing to contribute funding to the project. Regards, Gabriel To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message