How to set open_basedir parameter to none for all domains

Follow

Comments

3 comments

  • Avatar
    Stéphan Schamp

    When using CloudLinux with CageFS you don't need / want open_basedir restrictions.
    Each user is restricted to its own jail anyways.
    Furthermore, realpath_cache does not work when using open_basedir and thus decreases performance heavily for most CMS's.
    When you strace a FastCGI or FPM process you will see that these CMS's do an insane amount of lstat calls, which PHP can cache if open_basedir is set to none -> ""

    Can this be made configurable to have open_basedir set to none by default?
    So that new sites can get a correct open_basedir for CageFS?

  • Avatar
    Bulat Tsydenov

    @Stephan,

    > Can this be made configurable to have open_basedir set to none by default?
    > So that new sites can get a correct open_basedir for CageFS?
    If you configure PHP for a domain from PHP Selector (PHPs provided by Cloudlinux), Plesk, in this case, does not manage its configuration, it is supposed to be configured from PHP Selector.

  • Avatar
    Stéphan Schamp

    @Bulat

     

    We choose not to use PHP Selector as we prefer Plesk PHP versions ;-)
    A Plesk Team Member advised me to set open_basedir to none in the Service Plan.

    This is indeed the best and most elegant solution in Plesk as this works for FastCGI and PHP-FPM.

Please sign in to leave a comment.

Have more questions? Submit a request