Error Log - [pid=20195 euid=0 egid=99] suexec.cpp(294): setrlimit(2)s

[robbiez]

Hi
I have dedicated server with 1and1 who recently upgraded the server.

I now have this error in the error log, every few seconds.

PHP Code:

[Wed Jun 27 17:13:26 2012] [warn] Cannot get media type from 'x-mapp-php4'
[Wed Jun 27 17:13:26 2012] [warn] Cannot get media type from 'x-mapp-php4'
[Wed Jun 27 17:13:26 2012] [error] [client 82.69.62.110] [info] [pid=20195 euid=0 egid=99] suexec.cpp(294): setrlimit(2)s set (DATA, AS, STACK) to 32768 kB, referer: http://www.xxx.co.uk/shop/index.php
[Wed Jun 27 17:13:26 2012] [error] [client 82.69.62.110] [info] [pid=20195 euid=0 egid=99] suexec.cpp(294): setrlimit(2)s set (DATA, AS, STACK) to 151552 kB, referer: http://www.xxx.co.uk/shop/index.php 


The ip and webpage is different every time.

The server is running php 5, not 4.

As per 1and1 instructions i have
AddHandler x-mapp-php5 .php is the htaccess file to run php5.

Any pointers would be appreciated.

I have asked 1and1 but am still waiting for a response.

Thanks
Rob

[leslie.jones]

I'm just wondering why you would have something trying to set the user id of the running task? I'd expect to see that in malware trying to escalate privileges, but It may have other uses relating to file ownership and the like.

Does your script/application (/shop/index.php) make use of posix_setuid() / posix_setgid() and try to change the user ID to euid=0 (?root?) and the group ID to egid=99 for some reason you are aware of?

See: http://php.net/manual/en/function.posix-setuid.php