Is it possible to restrict the PHP ressource limits maximum to avoid server owners to go through the roof??

Submitted by -eclipse- on Sat, 01/14/2017 - 11:20 Pro Licensee

To Virtualmin

Is it possible to restrict the PHP ressource limits maximum to avoid server owners to go through the roof when they might edit the ressource limits them self? It could be that you had defined some maximum values so the owner couldn't go past these unless the server root admin did it?

  • Tim
Status: 
Active

Comments

Submitted by andreychek on Sat, 01/14/2017 - 12:07

Howdy -- you can use Administrative Options -> Edit Resource Limits to set limits on processes owned by a user, would that do what you're after?

Submitted by -eclipse- on Sat, 01/14/2017 - 12:47 Pro Licensee

Hi

When a user login he or she has the option to edit the PHP ressource limits when the option to edit PHP is active. Doing that they can set the ressource limit so high (memory, mb upload, execution time etc) it could take down the server itself. It's set under Services -> PHP XX configuration -> Ressource Limits

  • Tim

Submitted by JamieCameron on Sat, 01/14/2017 - 14:59

You can deny domain owners access to these limits, by logging in as root and going to Administration Options -> Edit Owner Limits.

Submitted by -eclipse- on Sun, 01/15/2017 - 14:55 Pro Licensee

Hi Jamie

But if I want the domain owners to be able to have this access to edit it, it would be nice if you could set a general maximum value for the ressource limits available.

  • Tim

Submitted by JamieCameron on Sun, 01/15/2017 - 18:27

Oh, I see ... that's a nice idea. I'll look into implementing this.

Submitted by -eclipse- on Wed, 02/01/2017 - 12:26 Pro Licensee

Hi Jamie

Would be a nice feature :)

  • Tim

Submitted by JamieCameron on Wed, 02/01/2017 - 16:12

In practice it's of limited value, as the limits are per-process so users could consume huge volumes of resources by just running lots of processes.

Submitted by -eclipse- on Wed, 02/01/2017 - 16:21 Pro Licensee

Hi Jamie

Sounds reasonable, well it sounded nice though :)

  • Tim

Submitted by -eclipse- on Tue, 02/07/2017 - 12:27 Pro Licensee

Hi Eric

I am not able to locate the option where to enable or disable the functionality to be able to edit those PHP resource limits as a virtual server owner??

  • Tim

Submitted by andreychek on Tue, 02/07/2017 - 12:45

I believe it's only possible to edit those options as the root user. I'm not seeing an option to edit them as a Virtual Server owner.... sorry!

Submitted by -eclipse- on Tue, 02/07/2017 - 13:06 Pro Licensee

Hi Eric

Well, it is :) If you login as server owner, it should be listed here : Virtualmin -> Services -> PHP X configuration -> Resource Limits.

So my question is, where do I enable / disable the functionality for server owners to be able to see the PHP x configuration page?

  • Tim

Submitted by andreychek on Tue, 02/07/2017 - 13:39

Ah, my apologies! I failed to read your earlier conversation on the matter, and assumed you were referring to Administrative Options -> Edit Resource Limits.

That said, I don't see the option Jamie was referring to above for the PHP Resource Limits either though... he may have to comment on which of the options in Administrator Options -> Edit Owner Limits would enable/disable access to the PHP resource options.

Submitted by JamieCameron on Tue, 02/07/2017 - 18:34

My apologies, currently there is no way to deny domain owners access to the Edit Resource Limits page.