Skip site navigation (1)Skip section navigation (2) 
Date:      Wed, 27 Jul 2005 16:58:50 +1000
From:      "David Hogan" <david@fundamentalit.com>
To:        "'Thomas Krause'" <freebsd-isp@chef-ingenieur.de>
Cc:        freebsd-isp@freebsd.org, "'Gustavo A. Baratto'" <gbaratto@superb.net>
Subject:   RE: preventing a user to start a process
Message-ID:  <20050727065843.8F30543D46@mx1.FreeBSD.org>
In-Reply-To: <42E66986.4080004@chef-ingenieur.de>
index | next in thread | previous in thread | raw e-mail 

> Unfortunately, that is not possible. E.g. typo3 calls Imagemagick, so I
> need system().

Hmmm ... ok

are you aware you can override many php.ini settings on a per directory
basis or even per vhost basis (I think) ? If you didn't have too many
exceptions, you could deny system() globally, then allow it just for trusted
users or scripts.

Hope this is practical,
Dave
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050727065843.8F30543D46>