主页 / user-177889

Rolf's questions

Martin Hope
Rolf
Asked: 2017-04-03 14:09:48 +0800 CST
  • 4

我注意到安装 sendmail，然后卸载它，使用 apt-get 会留下许多不需要的文件。

sudo apt-get install sendmail
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  liblockfile-bin liblockfile1 make procmail sendmail-base sendmail-bin
  sendmail-cf sensible-mda
Suggested packages:
  make-doc sendmail-doc rmail logcheck resolvconf sasl2-bin
Recommended packages:
  default-mta mail-transport-agent fetchmail
The following NEW packages will be installed:
      liblockfile-bin liblockfile1 make procmail sendmail sendmail-base
      sendmail-bin sendmail-cf sensible-mda
0 upgraded, 9 newly installed, 0 to remove and 0 not upgraded.
Need to get 2256 kB of archives.
After this operation, 5263 kB of additional disk space will be used.
Do you want to continue? [Y/n] y

所以我们安装了 sendmail - 9 个新包和 5.2MB。
几分钟后，我改变了主意，想卸载它。没问题，apt-get 让我满意，对吧？我清除（删除包和包配置文件）：

sudo apt-get purge sendmail
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
  procmail sensible-mda
Use 'apt-get autoremove' to remove them.
The following packages will be REMOVED:
  sendmail*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 219 kB disk space will be freed.
Do you want to continue? [Y/n] y

然后autoremove（删除自动安装的包依赖）

sudo apt-get autoremove sendmail
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package 'sendmail' is not installed, so not removed
The following packages will be REMOVED:
  procmail sensible-mda
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 550 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 24702 files and directories currently installed.)
Removing sensible-mda (8.14.4-8+deb8u1) ...
Removing procmail (3.22-24) ...
Processing triggers for man-db (2.7.0.2-5) ...

即 219 + 550 = 769KB 已恢复！我刚刚释放了 4.something MB 的空间吗？为了什么？

仔细查看输出后，似乎 apt-get 仅删除了之前自动安装的 3 个软件包。例如，软件包 sendmail-base 仍然存在：

sudo apt-get remove sendmail-base
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
  sendmail-base sendmail-bin
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 2464 kB disk space will be freed.
Do you want to continue? [Y/n]

所以我浪费了一些空间。但是为什么还安装了这些自动安装的依赖呢？

debian
Martin Hope
Rolf
Asked: 2013-06-15 11:17:26 +0800 CST
  • -1

我已经设置了一个用于生产的网络服务器。操作系统是 Windows Server，它运行 Apache 2.0 和 PHP 5.3 作为 apache 模块（还有 MySQL ......）。它用于托管属于不同客户的多个虚拟主机（Apache vhosts）。

此时PHP是以系统用户身份运行的。将来可能会授予客户 FTP 访问权限，因此 - 默认情况下 - 每个客户都可以通过 PHP 访问整个系统。这显然是不能接受的。

我知道我可以在 PHP 中设置 open_basedir，但我不确定它是否包含和足够可靠以被视为一个解决方案 - 它是否限制对所有 PHP 函数的访问，例如 include...？PHP 流怎么样？

我也知道 IIS 提供了解决该问题的方法，但我更愿意保留 Apache。

我最想设置的是一个可以满足以下要求（主要）的解决方案：

  • 保持优雅并以某种方式自动。我正在手动管理服务器 - 我希望每个虚拟主机的设置都涉及尽可能少的设置和配置编辑。
  • 允许例外。大多数托管网站都是我自己开发的，我想将它们全部链接到一个库文件夹，因此应该允许对该文件夹进行只读访问，尽管它位于虚拟主机的根目录之外。

那么，有哪些可用选项（如果有）？我已经做了一些研究，似乎该领域的大部分工作都是在 Linux 系统上完成的。

php