CloudLinux with mod_ruid2 ?
Forum
  1. Forums
  2. CloudLinux and Control Panels
  3. CloudLinux and cPanel
  1. Tapan Bhanot
  2. Friday, 25 March 2016
  3.  Subscribe via email
Is CloudLinux compatible with mod_ruid2 ?
Rate this post:
  1. 25.03.2016 07:03:07
  2. # 1
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

I had a server with CentOS 7.2 and had mod_ruid2 + DSO. All was fine then I installed CloudLinux as I came to know mod_isapi is faster etc. But sadly it does\'nt seems to be getting installed or working or something. Becuase when I had mod_isapi I changed handler to FCGI but it resulted in sites not opening. So I changed handler to DSO and sites worked but CSF firewall said that suphp should be used.

Hence I un-installed mod_isapi and recomplied apache back to mod_ruid2. Now CSF is also happy etc. But my real question is, CloudLinux + mod_ruid2 good speed and security wise ???

Thanks.
  1. 25.03.2016 08:03:13
  2. # 2
Bogdan Accepted Answer
Posts: 709
Joined: 26.06.2013
0
Votes
Undo
Hi,

Well, mod_lsapi and ruid2 are not compatible so it should be disabled, according to our requirements http://docs.cloudlinux.com/index.html?apache_mod_lsapi.html

The method that definitely work:

switch PHP to fcgid with cpanel
run \'cagefsctl --force-update\' so site could work with php fcgid
install mod_lsapi
enable mod_lsapi for one domain just to test. then enable globally.
  1. 25.03.2016 10:03:31
  2. # 3
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

I have done fcgi now, but when I am checking server security in CSF firewall it says:

---

Check suPHP:
To reduce the risk of hackers accessing all sites on the server from a compromised PHP web script, you should enable suPHP when you build apache/php. Note that there are sideeffects when enabling suPHP on a server and you should be aware of these before enabling it. Don\'t forget to enable it as the default PHP handler in WHM > PHP 5 Handler

---

How to fix that ???

Thanks.
  1. 25.03.2016 10:03:23
  2. # 4
Richard Hordern Accepted Answer
Posts: 219
Joined: 19.03.2011
0
Votes
Undo
Don\'t belive everything CSF says.

For instance CSF says you should run SSH on a non standard port, however if you run it on a port above 1024 and sshd crashes a user could potentially launch a script on the same port and intercept all incomming traffic so on our new servers we have moved back to port 22.

When CSF added the suphp warning it was in the days when suphp was the norm, now it\'s much better in terms of performance and just as safe to run Apache with lsapi. Just make sure PHP\'s running with PHP\'s user and not with nobody and you should be fine.
  1. 25.03.2016 10:03:46
  2. # 5
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
HI,

Thanks for the advice. Can you please tell me how do I make sure that PHP\'s running with PHP\'s user and not with nobody ??

Thanks.
  1. 25.03.2016 10:03:40
  2. # 6
Richard Hordern Accepted Answer
Posts: 219
Joined: 19.03.2011
0
Votes
Undo
Run a php script and either create a file with it and check the file owner or un ps aux |grep \'php\' while the script is running and that show show you what user is running PHP.
  1. 26.03.2016 14:03:40
  2. # 7
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

My question again is:

Does CL (specifically Cagefs and LVE) works if Apache is complied with mod_ruid2 ???

Thanks.
  1. 30.03.2016 13:03:16
  2. # 8
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

I had very bad experience with mod_lsapi and mysql governor. As soon as both were installed apache and mysql started crashing. I had 2 different teams working to resolve the issue but it didn\'t and finally I gave up and uninstalled both of the them and after that apache and mysql didn\'t crash. I am on centos 7 and apache + suphp.

So only cage and lve works rest of the things are useless I believe and that\'s why cl installer also doesn\'t installs them put of the box. I hope cl listens to this and does something about it.

Thanks.
  1. 30.03.2016 14:03:24
  2. # 9
Bogdan Accepted Answer
Posts: 709
Joined: 26.06.2013
0
Votes
Undo
Hello Tapan,

We are really interested to find out the core of the issue, but never got a reports about similar problem. Could you please create a ticket at https://helpdesk.cloudlinux.com/ and provide us with as much information as you have? Maybe some core files created or so?

What works with ruid2 and what does not could be found in our compatibility matrix: http://docs.cloudlinux.com/index.html?compatiblity_matrix.html .
  1. 08.04.2016 09:04:06
  2. # 10
Peter Grahn Accepted Answer
Posts: 14
Joined: 08.04.2016
0
Votes
Undo
Tapan,

Did you migrate from CentOS or did you install CL on a fresh server? We\'ve installed CL on all our new servers and everyting works perfectly. I was very impressed with mod_lsapi (LiteSpeed) that actually increasedspeed by over 3 times compared to Apache. Looking forward to the next cPanel build and installing EasyApache 4.
  1. 09.04.2016 09:04:00
  2. # 11
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

Yes I migrated from CentOS to CL. Now I am also using mod_lsapi and mysql governor but now I am getting Suspicious Process running emails etc.

Thanks.
  1. 09.04.2016 16:04:35
  2. # 12
Peter Grahn Accepted Answer
Posts: 14
Joined: 08.04.2016
0
Votes
Undo
Care to share? I've had a few issues with mail too that I managed to resolve,

Btw, you remeber to always to
cagefsctl --force-update
service httpd restart
  yes?
  1. 11.04.2016 10:04:07
  2. # 13
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

Yes I did those commands too. Below is a email:

---

Time:    Mon Apr 11 17:27:06 2016 +0530
PID:     312567 (Parent PID:312566)
Account: cattaketestapp
Uptime:  75 seconds


Executable:

/usr/selector/lsphp


Command Line (often faked in exploits):

lsphp:aketestapp/public_html/naukri/parse/index.php


Network connections by the process (if any):

tcp: 123.123.123.123:36514 -> 107.21.12.2:443


Files open by the process (if any):

/dev/null
/usr/local/apache/logs/error_log
/usr/local/apache/logs/error_log
/dev/null
/usr/local/apache/logs/sulsphp_log


Memory maps by the process (if any):

00400000-00ba1000 r-xp 00000000 08:02 14793022                           /usr/selector/lsphp
00da0000-00e50000 r--p 007a0000 08:02 14793022                           /usr/selector/lsphp
00e50000-00e64000 rw-p 00850000 08:02 14793022                           /usr/selector/lsphp
00e64000-00e87000 rw-p 00000000 00:00 0
02d8f000-03044000 rw-p 00000000 00:00 0                                  [heap]
03044000-03206000 rw-p 00000000 00:00 0                                  [heap]
7ff6abce9000-7ff6abcee000 r-xp 00000000 08:02 3372                       /lib64/libnss_dns-2.17.so
7ff6abcee000-7ff6abeed000 ---p 00005000 08:02 3372                       /lib64/libnss_dns-2.17.so
7ff6abeed000-7ff6abeee000 r--p 00004000 08:02 3372                       /lib64/libnss_dns-2.17.so
7ff6abeee000-7ff6abeef000 rw-p 00005000 08:02 3372                       /lib64/libnss_dns-2.17.so
7ff6abeef000-7ff6abfb2000 rw-p 00000000 00:00 0
7ff6abfb2000-7ff6abfbe000 r-xp 00000000 08:02 3374                       /lib64/libnss_files-2.17.so
7ff6abfbe000-7ff6ac1bd000 ---p 0000c000 08:02 3374                       /lib64/libnss_files-2.17.so
7ff6ac1bd000-7ff6ac1be000 r--p 0000b000 08:02 3374                       /lib64/libnss_files-2.17.so
7ff6ac1be000-7ff6ac1bf000 rw-p 0000c000 08:02 3374                       /lib64/libnss_files-2.17.so
7ff6ac1bf000-7ff6ac1c5000 rw-p 00000000 00:00 0
7ff6ac1c5000-7ff6ac1cc000 r-xp 00000000 08:02 4334748742                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_mysql.so
7ff6ac1cc000-7ff6ac3cb000 ---p 00007000 08:02 4334748742                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_mysql.so
7ff6ac3cb000-7ff6ac3cc000 r--p 00006000 08:02 4334748742                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_mysql.so
7ff6ac3cc000-7ff6ac3cd000 rw-p 00007000 08:02 4334748742                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_mysql.so
7ff6ac3cd000-7ff6ac484000 r-xp 00000000 08:02 4334748745                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_sqlite.so
7ff6ac484000-7ff6ac684000 ---p 000b7000 08:02 4334748745                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_sqlite.so
7ff6ac684000-7ff6ac686000 r--p 000b7000 08:02 4334748745                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_sqlite.so
7ff6ac686000-7ff6ac689000 rw-p 000b9000 08:02 4334748745                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo_sqlite.so
7ff6ac689000-7ff6ac6a2000 r-xp 00000000 08:02 4334748741                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo.so
7ff6ac6a2000-7ff6ac8a1000 ---p 00019000 08:02 4334748741                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo.so
7ff6ac8a1000-7ff6ac8a4000 r--p 00018000 08:02 4334748741                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo.so
7ff6ac8a4000-7ff6ac8a5000 rw-p 0001b000 08:02 4334748741                 /usr/local/lib/php/extensions/no-debug-non-zts-20121212/pdo.so
7ff6ac8a5000-7ff6aca08000 r-xp 00000000 08:02 2150803813                 /usr/local/IonCube/ioncube_loader_lin_5.5.so
7ff6aca08000-7ff6acb07000 ---p 00163000 08:02 2150803813                 /usr/local/IonCube/ioncube_loader_lin_5.5.so
7ff6acb07000-7ff6acb16000 rw-p 00162000 08:02 2150803813                 /usr/local/IonCube/ioncube_loader_lin_5.5.so
7ff6acb16000-7ff6acb19000 rw-p 00000000 00:00 0
7ff6acb19000-7ff6acb3a000 r-xp 00000000 08:02 3482                       /lib64/libselinux.so.1
7ff6acb3a000-7ff6acd3a000 ---p 00021000 08:02 3482                       /lib64/libselinux.so.1
7ff6acd3a000-7ff6acd3b000 r--p 00021000 08:02 3482                       /lib64/libselinux.so.1
7ff6acd3b000-7ff6acd3c000 rw-p 00022000 08:02 3482                       /lib64/libselinux.so.1
7ff6acd3c000-7ff6acd3e000 rw-p 00000000 00:00 0
7ff6acd3e000-7ff6acd40000 r-xp 00000000 08:02 333743                     /lib64/libXau.so.6.0.0
7ff6acd40000-7ff6acf40000 ---p 00002000 08:02 333743                     /lib64/libXau.so.6.0.0
7ff6acf40000-7ff6acf41000 r--p 00002000 08:02 333743                     /lib64/libXau.so.6.0.0
7ff6acf41000-7ff6acf42000 rw-p 00003000 08:02 333743                     /lib64/libXau.so.6.0.0
7ff6acf42000-7ff6acf45000 r-xp 00000000 08:02 26156                      /lib64/libkeyutils.so.1.5
7ff6acf45000-7ff6ad144000 ---p 00003000 08:02 26156                      /lib64/libkeyutils.so.1.5
7ff6ad144000-7ff6ad145000 r--p 00002000 08:02 26156                      /lib64/libkeyutils.so.1.5
7ff6ad145000-7ff6ad146000 rw-p 00003000 08:02 26156                      /lib64/libkeyutils.so.1.5
7ff6ad146000-7ff6ad153000 r-xp 00000000 08:02 519685                     /lib64/libkrb5support.so.0.1
7ff6ad153000-7ff6ad353000 ---p 0000d000 08:02 519685                     /lib64/libkrb5support.so.0.1
7ff6ad353000-7ff6ad354000 r--p 0000d000 08:02 519685                     /lib64/libkrb5support.so.0.1
7ff6ad354000-7ff6ad355000 rw-p 0000e000 08:02 519685                     /lib64/libkrb5support.so.0.1
7ff6ad355000-7ff6ad36b000 r-xp 00000000 08:02 27499                      /lib64/libpthread-2.17.so
7ff6ad36b000-7ff6ad56b000 ---p 00016000 08:02 27499                      /lib64/libpthread-2.17.so
7ff6ad56b000-7ff6ad56c000 r--p 00016000 08:02 27499                      /lib64/libpthread-2.17.so
7ff6ad56c000-7ff6ad56d000 rw-p 00017000 08:02 27499                      /lib64/libpthread-2.17.so
7ff6ad56d000-7ff6ad571000 rw-p 00000000 00:00 0
7ff6ad571000-7ff6ad6a6000 r-xp 00000000 08:02 26173                      /lib64/libglib-2.0.so.0.4200.2
7ff6ad6a6000-7ff6ad8a5000 ---p 00135000 08:02 26173                      /lib64/libglib-2.0.so.0.4200.2
7ff6ad8a5000-7ff6ad8a6000 r--p 00134000 08:02 26173                      /lib64/libglib-2.0.so.0.4200.2
7ff6ad8a6000-7ff6ad8a7000 rw-p 00135000 08:02 26173                      /lib64/libglib-2.0.so.0.4200.2
7ff6ad8a7000-7ff6ad8a8000 rw-p 00000000 00:00 0
7ff6ad8a8000-7ff6ad8ab000 r-xp 00000000 08:02 51083                      /lib64/libgmodule-2.0.so.0.4200.2
7ff6ad8ab000-7ff6adaaa000 ---p 00003000 08:02 51083                      /lib64/libgmodule-2.0.so.0.4200.2
7ff6adaaa000-7ff6adaab000 r--p 00002000 08:02 51083                      /lib64/libgmodule-2.0.so.0.4200.2
7ff6adaab000-7ff6adaac000 rw-p 00003000 08:02 51083                      /lib64/libgmodule-2.0.so.0.4200.2
7ff6adaac000-7ff6adacd000 r-xp 00000000 08:02 333795                     /lib64/libxcb.so.1.1.0
7ff6adacd000-7ff6adccc000 ---p 00021000 08:02 333795                     /lib64/libxcb.so.1.1.0
7ff6adccc000-7ff6adccd000 r--p 00020000 08:02 333795                     /lib64/libxcb.so.1.1.0
7ff6adccd000-7ff6adcce000 rw-p 00021000 08:02 333795                     /lib64/libxcb.so.1.1.0
7ff6adcce000-7ff6adce9000 r-xp 00000000 08:02 3489                       /lib64/libaudit.so.1.0.0
7ff6adce9000-7ff6adee9000 ---p 0001b000 08:02 3489                       /lib64/libaudit.so.1.0.0
7ff6adee9000-7ff6adeea000 r--p 0001b000 08:02 3489                       /lib64/libaudit.so.1.0.0
7ff6adeea000-7ff6adeeb000 rw-p 0001c000 08:02 3489                       /lib64/libaudit.so.1.0.0
7ff6adeeb000-7ff6adef5000 rw-p 00000000 00:00 0
7ff6adef5000-7ff6adef7000 r-xp 00000000 08:02 3077                       /lib64/libfreebl3.so
7ff6adef7000-7ff6ae0f6000 ---p 00002000 08:02 3077                       /lib64/libfreebl3.so
7ff6ae0f6000-7ff6ae0f7000 r--p 00001000 08:02 3077                       /lib64/libfreebl3.so
7ff6ae0f7000-7ff6ae0f8000 rw-p 00002000 08:02 3077                       /lib64/libfreebl3.so
7ff6ae0f8000-7ff6ae2ae000 r-xp 00000000 08:02 3352                       /lib64/libc-2.17.so
7ff6ae2ae000-7ff6ae4ae000 ---p 001b6000 08:02 3352                       /lib64/libc-2.17.so
7ff6ae4ae000-7ff6ae4b2000 r--p 001b6000 08:02 3352                       /lib64/libc-2.17.so
7ff6ae4b2000-7ff6ae4b4000 rw-p 001ba000 08:02 3352                       /lib64/libc-2.17.so
7ff6ae4b4000-7ff6ae4b9000 rw-p 00000000 00:00 0
7ff6ae4b9000-7ff6ae4dd000 r-xp 00000000 08:02 3405                       /lib64/liblzma.so.5.0.99
7ff6ae4dd000-7ff6ae6dc000 ---p 00024000 08:02 3405                       /lib64/liblzma.so.5.0.99
7ff6ae6dc000-7ff6ae6dd000 r--p 00023000 08:02 3405                       /lib64/liblzma.so.5.0.99
7ff6ae6dd000-7ff6ae6de000 rw-p 00024000 08:02 3405                       /lib64/liblzma.so.5.0.99
7ff6ae6de000-7ff6ae838000 r-xp 00000000 08:02 6444197915                 /opt/xml2/lib/libxml2.so.2.9.2
7ff6ae838000-7ff6aea37000 ---p 0015a000 08:02 6444197915                 /opt/xml2/lib/libxml2.so.2.9.2
7ff6aea37000-7ff6aea3f000 r--p 00159000 08:02 6444197915                 /opt/xml2/lib/libxml2.so.2.9.2
7ff6aea3f000-7ff6aea41000 rw-p 00161000 08:02 6444197915                 /opt/xml2/lib/libxml2.so.2.9.2
7ff6aea41000-7ff6aea42000 rw-p 00000000 00:00 0
7ff6aea42000-7ff6aeae2000 r-xp 00000000 08:02 501966                     /lib64/libfreetype.so.6.10.0
7ff6aeae2000-7ff6aece1000 ---p 000a0000 08:02 501966                     /lib64/libfreetype.so.6.10.0
7ff6aece1000-7ff6aece7000 r--p 0009f000 08:02 501966                     /lib64/libfreetype.so.6.10.0
7ff6aece7000-7ff6aece8000 rw-p 000a5000 08:02 501966                     /lib64/libfreetype.so.6.10.0
7ff6aece8000-7ff6aed1a000 r-xp 00000000 08:02 13636                      /lib64/libidn.so.11.6.11
7ff6aed1a000-7ff6aef19000 ---p 00032000 08:02 13636                      /lib64/libidn.so.11.6.11
7ff6aef19000-7ff6aef1a000 r--p 00031000 08:02 13636                      /lib64/libidn.so.11.6.11
7ff6aef1a000-7ff6aef1b000 rw-p 00032000 08:02 13636                      /lib64/libidn.so.11.6.11
7ff6aef1b000-7ff6aef78000 r-xp 00000000 08:02 2148834573                 /opt/curlssl/lib/libcurl.so.4.3.0
7ff6aef78000-7ff6af178000 ---p 0005d000 08:02 2148834573                 /opt/curlssl/lib/libcurl.so.4.3.0
7ff6af178000-7ff6af17a000 r--p 0005d000 08:02 2148834573                 /opt/curlssl/lib/libcurl.so.4.3.0
7ff6af17a000-7ff6af17b000 rw-p 0005f000 08:02 2148834573                 /opt/curlssl/lib/libcurl.so.4.3.0
7ff6af17b000-7ff6af17e000 r-xp 00000000 08:02 3500                       /lib64/libcom_err.so.2.1
7ff6af17e000-7ff6af37d000 ---p 00003000 08:02 3500                       /lib64/libcom_err.so.2.1
7ff6af37d000-7ff6af37e000 r--p 00002000 08:02 3500                       /lib64/libcom_err.so.2.1
7ff6af37e000-7ff6af37f000 rw-p 00003000 08:02 3500                       /lib64/libcom_err.so.2.1
7ff6af37f000-7ff6af3ae000 r-xp 00000000 08:02 519673                     /lib64/libk5crypto.so.3.1
7ff6af3ae000-7ff6af5ad000 ---p 0002f000 08:02 519673                     /lib64/libk5crypto.so.3.1
7ff6af5ad000-7ff6af5af000 r--p 0002e000 08:02 519673                     /lib64/libk5crypto.so.3.1
7ff6af5af000-7ff6af5b0000 rw-p 00030000 08:02 519673                     /lib64/libk5crypto.so.3.1
7ff6af5b0000-7ff6af5b1000 rw-p 00000000 00:00 0
7ff6af5b1000-7ff6af686000 r-xp 00000000 08:02 519683                     /lib64/libkrb5.so.3.3
7ff6af686000-7ff6af886000 ---p 000d5000 08:02 519683                     /lib64/libkrb5.so.3.3
7ff6af886000-7ff6af893000 r--p 000d5000 08:02 519683                     /lib64/libkrb5.so.3.3
7ff6af893000-7ff6af896000 rw-p 000e2000 08:02 519683                     /lib64/libkrb5.so.3.3
7ff6af896000-7ff6af8df000 r-xp 00000000 08:02 519670                     /lib64/libgssapi_krb5.so.2.2
7ff6af8df000-7ff6afadf000 ---p 00049000 08:02 519670                     /lib64/libgssapi_krb5.so.2.2
7ff6afadf000-7ff6afae0000 r--p 00049000 08:02 519670                     /lib64/libgssapi_krb5.so.2.2
7ff6afae0000-7ff6afae2000 rw-p 0004a000 08:02 519670                     /lib64/libgssapi_krb5.so.2.2
7ff6afae2000-7ff6afaf8000 r-xp 00000000 08:02 3366                       /lib64/libnsl-2.17.so
7ff6afaf8000-7ff6afcf7000 ---p 00016000 08:02 3366                       /lib64/libnsl-2.17.so
7ff6afcf7000-7ff6afcf8000 r--p 00015000 08:02 3366                       /lib64/libnsl-2.17.so
7ff6afcf8000-7ff6afcf9000 rw-p 00016000 08:02 3366                       /lib64/libnsl-2.17.so
7ff6afcf9000-7ff6afcfb000 rw-p 00000000 00:00 0
7ff6afcfb000-7ff6afcfe000 r-xp 00000000 08:02 3359                       /lib64/libdl-2.17.so
7ff6afcfe000-7ff6afefd000 ---p 00003000 08:02 3359                       /lib64/libdl-2.17.so
7ff6afefd000-7ff6afefe000 r--p 00002000 08:02 3359                       /lib64/libdl-2.17.so
7ff6afefe000-7ff6afeff000 rw-p 00003000 08:02 3359                       /lib64/libdl-2.17.so
7ff6afeff000-7ff6b0000000 r-xp 00000000 08:02 3362                       /lib64/libm-2.17.so
7ff6b0000000-7ff6b01ff000 ---p 00101000 08:02 3362                       /lib64/libm-2.17.so
7ff6b01ff000-7ff6b0200000 r--p 00100000 08:02 3362                       /lib64/libm-2.17.so
7ff6b0200000-7ff6b0201000 rw-p 00101000 08:02 3362                       /lib64/libm-2.17.so
7ff6b0201000-7ff6b0208000 r-xp 00000000 08:02 27503                      /lib64/librt-2.17.so
7ff6b0208000-7ff6b0407000 ---p 00007000 08:02 27503                      /lib64/librt-2.17.so
7ff6b0407000-7ff6b0408000 r--p 00006000 08:02 27503                      /lib64/librt-2.17.so
7ff6b0408000-7ff6b0409000 rw-p 00007000 08:02 27503                      /lib64/librt-2.17.so
7ff6b0409000-7ff6b044a000 r-xp 00000000 08:02 4320129893                 /opt/pcre/lib/libpcre.so.1.2.6
7ff6b044a000-7ff6b064a000 ---p 00041000 08:02 4320129893                 /opt/pcre/lib/libpcre.so.1.2.6
7ff6b064a000-7ff6b064b000 r--p 00041000 08:02 4320129893                 /opt/pcre/lib/libpcre.so.1.2.6
7ff6b064b000-7ff6b064c000 rw-p 00042000 08:02 4320129893                 /opt/pcre/lib/libpcre.so.1.2.6
7ff6b064c000-7ff6b0657000 r-xp 00000000 08:02 785885                     /lib64/libenchant.so.1.6.0
7ff6b0657000-7ff6b0856000 ---p 0000b000 08:02 785885                     /lib64/libenchant.so.1.6.0
7ff6b0856000-7ff6b0857000 r--p 0000a000 08:02 785885                     /lib64/libenchant.so.1.6.0
7ff6b0857000-7ff6b0858000 rw-p 0000b000 08:02 785885                     /lib64/libenchant.so.1.6.0
7ff6b0858000-7ff6b089b000 r-xp 00000000 08:02 313822                     /lib64/libjpeg.so.62.1.0
7ff6b089b000-7ff6b0a9b000 ---p 00043000 08:02 313822                     /lib64/libjpeg.so.62.1.0
7ff6b0a9b000-7ff6b0a9c000 r--p 00043000 08:02 313822                     /lib64/libjpeg.so.62.1.0
7ff6b0a9c000-7ff6b0a9d000 rw-p 00044000 08:02 313822                     /lib64/libjpeg.so.62.1.0
7ff6b0a9d000-7ff6b0aad000 rw-p 00000000 00:00 0
7ff6b0aad000-7ff6b0ad6000 r-xp 00000000 08:02 313830                     /lib64/libpng15.so.15.13.0
7ff6b0ad6000-7ff6b0cd6000 ---p 00029000 08:02 313830                     /lib64/libpng15.so.15.13.0
7ff6b0cd6000-7ff6b0cd7000 r--p 00029000 08:02 313830                     /lib64/libpng15.so.15.13.0
7ff6b0cd7000-7ff6b0cd8000 rw-p 0002a000 08:02 313830                     /lib64/libpng15.so.15.13.0
7ff6b0cd8000-7ff6b0ce9000 r-xp 00000000 08:02 349422                     /lib64/libXpm.so.4.11.0
7ff6b0ce9000-7ff6b0ee8000 ---p 00011000 08:02 349422                     /lib64/libXpm.so.4.11.0
7ff6b0ee8000-7ff6b0ee9000 r--p 00010000 08:02 349422                     /lib64/libXpm.so.4.11.0
7ff6b0ee9000-7ff6b0eea000 rw-p 00011000 08:02 349422                     /lib64/libXpm.so.4.11.0
7ff6b0eea000-7ff6b1022000 r-xp 00000000 08:02 349412                     /lib64/libX11.so.6.3.0
7ff6b1022000-7ff6b1222000 ---p 00138000 08:02 349412                     /lib64/libX11.so.6.3.0
7ff6b1222000-7ff6b1223000 r--p 00138000 08:02 349412                     /lib64/libX11.so.6.3.0
7ff6b1223000-7ff6b1228000 rw-p 00139000 08:02 349412                     /lib64/libX11.so.6.3.0
7ff6b1228000-7ff6b1235000 r-xp 00000000 08:02 555289                     /lib64/libpam.so.0.83.1
7ff6b1235000-7ff6b1435000 ---p 0000d000 08:02 555289                     /lib64/libpam.so.0.83.1
7ff6b1435000-7ff6b1436000 r--p 0000d000 08:02 555289                     /lib64/libpam.so.0.83.1
7ff6b1436000-7ff6b1437000 rw-p 0000e000 08:02 555289                     /lib64/libpam.so.0.83.1
7ff6b1437000-7ff6b1440000 r-xp 00000000 08:02 334590                     /lib64/libltdl.so.7.3.0
7ff6b1440000-7ff6b163f000 ---p 00009000 08:02 334590                     /lib64/libltdl.so.7.3.0
7ff6b163f000-7ff6b1640000 r--p 00008000 08:02 334590                     /lib64/libltdl.so.7.3.0
7ff6b1640000-7ff6b1641000 rw-p 00009000 08:02 334590                     /lib64/libltdl.so.7.3.0
7ff6b1641000-7ff6b166a000 r-xp 00000000 08:02 2148834551                 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff6b166a000-7ff6b186a000 ---p 00029000 08:02 2148834551                 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff6b186a000-7ff6b186c000 r--p 00029000 08:02 2148834551                 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff6b186c000-7ff6b186e000 rw-p 0002b000 08:02 2148834551                 /opt/libmcrypt/lib/libmcrypt.so.4.4.8
7ff6b186e000-7ff6b1873000 rw-p 00000000 00:00 0
7ff6b1873000-7ff6b1889000 r-xp 00000000 08:02 27501                      /lib64/libresolv-2.17.so
7ff6b1889000-7ff6b1a89000 ---p 00016000 08:02 27501                      /lib64/libresolv-2.17.so
7ff6b1a89000-7ff6b1a8a000 r--p 00016000 08:02 27501                      /lib64/libresolv-2.17.so
7ff6b1a8a000-7ff6b1a8b000 rw-p 00017000 08:02 27501                      /lib64/libresolv-2.17.so
7ff6b1a8b000-7ff6b1a8d000 rw-p 00000000 00:00 0
7ff6b1a8d000-7ff6b1aa2000 r-xp 00000000 08:02 3484                       /lib64/libz.so.1.2.7
7ff6b1aa2000-7ff6b1ca1000 ---p 00015000 08:02 3484                       /lib64/libz.so.1.2.7
7ff6b1ca1000-7ff6b1ca2000 r--p 00014000 08:02 3484                       /lib64/libz.so.1.2.7
7ff6b1ca2000-7ff6b1ca3000 rw-p 00015000 08:02 3484                       /lib64/libz.so.1.2.7
7ff6b1ca3000-7ff6b1d06000 r-xp 00000000 08:02 13646                      /lib64/libssl.so.1.0.1e
7ff6b1d06000-7ff6b1f05000 ---p 00063000 08:02 13646                      /lib64/libssl.so.1.0.1e
7ff6b1f05000-7ff6b1f09000 r--p 00062000 08:02 13646                      /lib64/libssl.so.1.0.1e
7ff6b1f09000-7ff6b1f10000 rw-p 00066000 08:02 13646                      /lib64/libssl.so.1.0.1e
7ff6b1f10000-7ff6b20ce000 r-xp 00000000 08:02 13637                      /lib64/libcrypto.so.1.0.1e
7ff6b20ce000-7ff6b22ce000 ---p 001be000 08:02 13637                      /lib64/libcrypto.so.1.0.1e
7ff6b22ce000-7ff6b22e8000 r--p 001be000 08:02 13637                      /lib64/libcrypto.so.1.0.1e
7ff6b22e8000-7ff6b22f4000 rw-p 001d8000 08:02 13637                      /lib64/libcrypto.so.1.0.1e
7ff6b22f4000-7ff6b22f8000 rw-p 00000000 00:00 0
7ff6b22f8000-7ff6b2300000 r-xp 00000000 08:02 3356                       /lib64/libcrypt-2.17.so
7ff6b2300000-7ff6b24ff000 ---p 00008000 08:02 3356                       /lib64/libcrypt-2.17.so
7ff6b24ff000-7ff6b2500000 r--p 00007000 08:02 3356                       /lib64/libcrypt-2.17.so
7ff6b2500000-7ff6b2501000 rw-p 00008000 08:02 3356                       /lib64/libcrypt-2.17.so
7ff6b2501000-7ff6b252f000 rw-p 00000000 00:00 0
7ff6b252f000-7ff6b2550000 r-xp 00000000 08:02 27490                      /lib64/ld-2.17.so
7ff6b255e000-7ff6b259f000 rw-p 00000000 00:00 0
7ff6b259f000-7ff6b2743000 rw-p 00000000 00:00 0
7ff6b274c000-7ff6b274f000 rw-s 00000000 00:04 62636245                   /dev/zero (deleted)
7ff6b274f000-7ff6b2750000 rw-p 00000000 00:00 0
7ff6b2750000-7ff6b2751000 r--p 00021000 08:02 27490                      /lib64/ld-2.17.so
7ff6b2751000-7ff6b2752000 rw-p 00022000 08:02 27490                      /lib64/ld-2.17.so
7ff6b2752000-7ff6b2753000 rw-p 00000000 00:00 0
7ffe7e51e000-7ffe7e53f000 rw-p 00000000 00:00 0                          [stack]
7ffe7e5ed000-7ffe7e5ef000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
---

Thanks.
  1. 13.04.2016 10:04:22
  2. # 14
Bogdan Accepted Answer
Posts: 709
Joined: 26.06.2013
0
Votes
Undo
Who is sending this report to you? You may add /usr/selector/lsphp to whitelist there so you will not be bothered. From other side - yes it is suspicious it is running for 70+ seconds however it could depend from LVE speed limit and number of requests for this LVE.
  1. 15.04.2016 02:04:53
  2. # 15
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
I think its CSF. How do I limit the time ???? Secondly what lve speed limit and number of requests you use ???

I currently have the following for all my packages:

===
Speed: 100%
VMem (MB): -
Pmem (MB): 1024
EP: 20
NProc: 100
IO: 1024
IOPS: 1024
INODES: -|-
===

How / what is best ?? My server is 16 cores with 96 GB RAM.

Thanks.
  1. 19.04.2016 03:04:36
  2. # 16
Bogdan Accepted Answer
Posts: 709
Joined: 26.06.2013
0
Votes
Undo
Strange.. I was sure I answer here before but do not see my post.

Yes, most probably email goes from LFD (a part of CSF scripts). However looking onto script name public_html/naukri/parse/index.php I suppose that is some parsing software which needs more time to finish it\'s job. Most probably you should do nothing here, but you can contact customer and ask what is that.

From what I see you may exclude this process with /etc/csf/csf.pignorefile adding something like:
cmd:lsphp:aketestapp/public_html/naukri/parse/index.php 

Then restart lfd with /etc/init.d/lfd restart


Your LVE limits are fine.
  1. 19.04.2016 03:04:23
  2. # 17
Tapan Bhanot Accepted Answer
Posts: 10
Joined: 10.03.2014
0
Votes
Undo
Hi,

I do not want to ignore the process. I would like to get notified about the users. I just wanted to make sure that some hack etc was not going on.

Thanks for the help :)
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.