Re: [webmin-l] Security Advise for Virtuamin users !

[Jamie C. <jca...@we...>]

Hi all,<br />This change would disable various PHP functions for executing commands, which would protect against some PHP security holes I guess (such as ones where an attacker can trick PHP into running arbitrary code). However, it may also break PHP programs that use these functions to run other shell commands... so it isn't something I would enable by default for Virtualmin.<br /><br />=A0- Jamie<br /><br />On 12/Aug/2006 15:24 Vernon wrote ..
<blockquote type=3D"cite">

<font size=3D"2">Not sure who you are. Jamie is this still you are suggetsing as well?
<br />
<br /><b>---------- Original Message -----------</b>
<br />From: Hamid Hashemi &lt;ha...@mo...&gt; 
<br />To: Webmin users list &lt;web...@li...&gt; 
<br />Sent: Sun, 13 Aug 2006 01:45:35 +0330 
<br />Subject: [webmin-l] Security Advise for Virtuamin users ! 
<br />
<br />&gt; Hi , 
<br />&gt; 
<br />&gt; Just want to say please add the following line to you php.ini while you 
<br />&gt; are running virtualmin and you have some sites hosted on your server : 
<br />&gt; 
<br />&gt; disable_functions =3D 
<br />&gt; exec,popen,shell_exec,proc_open,passthru,system,stream_select,escapeshellcmd,pcntl_exec 
<br />&gt; 
<br />&gt; or run you php in safe_mode. BTW safe_mode is not a good choice for 
<br />&gt; customers. 
<br />&gt; 
<br />&gt; -- 
<br />&gt; Regards 
<br />&gt;    =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 
<br />&gt;   /  Seyyed Hamid Reza    /         WINDOWS FOR NOW  !!            / 
<br />&gt;  /  Hashemi Golpayegani  /  Linux for future , FreeBSD for ever  / 
<br />&gt; /    Morva System Co.   / ------------------------------------- / 
<br />&gt; /  Network Administrator/ ha...@mo...   ,   ICQ# : 42209876 / 
<br />&gt; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 
<br />&gt; 
<br />&gt; ------------------------------------------------------------------------- 
<br />&gt; Using Tomcat but need to do more? Need to support web services, security? 
<br />&gt; Get stuff done quickly with pre-integrated technology to make your job easier 
<br />&gt; Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo 
<br />&gt; <a target=3D"_blank" href=3D"http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D121642">http://sel.as-us.falkag.net/sel?cmd=3Dlnk&amp;kid=3D120709&amp;bid=3D263057&amp;dat=3D121642</a> 
<br />&gt; - 
<br />&gt; Forwarded by the Webmin mailing list at web...@li... 
<br />&gt; To remove yourself from this list, go to 
<br />&gt; <a target=3D"_blank" href=3D"http://lists.sourceforge.net/lists/listinfo/webadmin-list">http://lists.sourceforge.net/lists/listinfo/webadmin-list</a> 
<br />&gt; 
<br />&gt; -- 
<br />&gt; This message has been scanned for viruses and 
<br />&gt; dangerous content by comp-wiz.com, inc.'s MailScanner, 
<br />&gt; and is believed to be clean. 
<br /><b>------- End of Original Message -------</b>
<br /></font>
</blockquote><br />