https://bugzilla.novell.com/show_bug.cgi?id=283725 snwint@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|yast2-maintainers@suse.de |ltinkl@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=283725#c1 Cristian Rodriguez changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |judas_iscariote@shorewall.net --- Comment #1 from Cristian Rodriguez 2007-06-20 06:12:04 MST --- Alesandro.. the so called PHP safe_mode should **never** be used, do not rely on it as it fortunately has disappeared from PHP. safe_mode is(or was) by definition,one of the most hiliaruis security features. if still in doubt , read this (mea culpa) article http://ilia.ws/archives/18-PHPs-safe_mode-or-how-not-to-implement-security.h... for the security team : Dont waste a minute of your time with this stuff, it is just broken, and not the default configuration. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=283725#c3 --- Comment #3 from Cristian Rodriguez 2007-06-21 05:17:44 MST --- if you want to add an additional protection, use open_basedir instead of safe_mode, it is flawed as well and has limited value, but is less annoying, more functional and less intrusive than safe_mode. Nothing replace proper permissions and isolation of system users and process, a good way to do this is using an appamor profile for a php5-fastcgi and running the fastcgi instance with a separate process per user. I'll think about adding documentation and/or scripts to do this in the future (darix have a working implementation IIRC) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.