mod_fastcgi + php

Hello to all

I'm looking for a sollution to run php in a safe way in shared environment.

Currently I use PHP as a CGI which is executed by a wrapper. This
wrapper works like suexec (it does some checking about file permissions)
but just before executing PHP it chroot's to VirtualHosts "filesystem".
Every virtualhost has it's own "filesystem" for chroot purposes (/bin,
/etc/ and all nessecary lib's and bin's).
That approach works for me excellent, except its poor performance.

My question is: is it possible to use FastCGI for executing PHP not only
under some UID/GID (suexec does that fine), but also in specified
chroot'ed environment (different for every VirtualHost) ?

My idea is to use wrapper, that will find out for which virtualhost it
needs to spawn PHP, that:

chdir('/vhost/path');
seteuid(UID);
setegid(GID);
chroot('./');
execv();

I've done some tests with FastCGI wrappers, but inside wrapper i can't
get any informations about target virtualhost. Also setting some env
variables inside <VirtualHost> directive doesn't work. Maybe FastCGI app
is executed before apache process VirtualHost section ?

Maybe you could point me how can i find inside the wrapper for which
VirtualHost is this request executed.

If my aproach is a lost battle, please let me know. I'll just buy better
hardware :)

Regards
Gasior

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/