Whether sendfile can be taken advantage of is determined by the kernel. It should not hurt even it is not supported by the kernel.
mod_security configuration for the apache vhost is independant. The requet filter configuration in admin console has not effect to apache vhosts.
The Rails easy configuation is a lot easier. A lot of configurations has been automated behind the scene. The end result is the same for a simple rails app setup.
The manual configuration give you more flexibilities if you need it.
The easiest solution is using our Rails vhost template, it is based on our easy configuration.
Our Wiki should be editable by any forum user. Feel free to and your doc there.
It does not matter if you use "PHP suEXEC", "PHP suEXEC MaxConn" is the limit for each user. I don't recommend setting connection and childrens too high.
I don't think it is the rewrite rule.
You can add "RewriteLogLevle 9" to the configuration of this vhost in httpd.conf. then check the rewrite log in error.log.
Please turn on debug logging, and check your error.log and stderr.log.
Unless you changed the external app configuration, the executable should be named as /opt/lsws/fcgi-bin/lsphp, instead of "php", php.ini should be at /opt/lsws/php/php.ini.
No. It does not.
You should not let root own the document root.
Only the CGI that need to executed as root should be owned by root with SetUID bit set.
LSWS will not start any CGI process as root, period.
However, a SetUID process will change the user id to who own the file by itself.
LiteSpeed will not start any CGI with UID less than 10, but a Set UID CGI will change it UID to the UID of the owner of the file after it starts. make sure to let LiteSpeed allowing Set UID CGI.