Re: PHP 4.0 Bug #3991 Updated: admin_values (like safe mode) can be overridden
| From: | (David J. MacKenzie) | Date: | Wed, 16 Aug 2000 19:55:56 +0000 |
| Subject: | Re: PHP 4.0 Bug #3991 Updated: admin_values (like safe mode) can be overridden | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-29180@lists.php.net to get a copy of this message | ||
This bug is equivalent to having a back door from a chrooted environment.
The problem is that users can undo security settings that only
administrators are supposed to be able to change.
Another analogy is all the holes in the Java runtime sandboxes that
have made the news. This is the same sort of bug.