Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Jul 2005 16:58:50 +1000
From:      "David Hogan" <david@fundamentalit.com>
To:        "'Thomas Krause'" <freebsd-isp@chef-ingenieur.de>
Cc:        freebsd-isp@freebsd.org, "'Gustavo A. Baratto'" <gbaratto@superb.net>
Subject:   RE: preventing a user to start a process
Message-ID:  <20050727065843.8F30543D46@mx1.FreeBSD.org>
In-Reply-To: <42E66986.4080004@chef-ingenieur.de>

next in thread | previous in thread | raw e-mail | index | archive | help
> Unfortunately, that is not possible. E.g. typo3 calls Imagemagick, so I
> need system().

Hmmm ... ok

are you aware you can override many php.ini settings on a per directory
basis or even per vhost basis (I think) ? If you didn't have too many
exceptions, you could deny system() globally, then allow it just for trusted
users or scripts.

Hope this is practical,
Dave




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050727065843.8F30543D46>