Re: Re: PHP 4.0 Bug #3991 Updated: admin_values (like safe mode) can be overridden
| From: | waldschrott | Date: | Wed, 16 Aug 2000 20:10:49 +0000 |
| Subject: | Re: Re: PHP 4.0 Bug #3991 Updated: admin_values (like safe mode) can be overridden | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-29183@lists.php.net to get a copy of this message | ||
You can configure disallowing overriding values in the .conf file, so where´s the problem?
David J. MacKenzie wrote:
This bug is equivalent to having a back door from a chrooted environment. The problem is that users can undo security settings that only administrators are supposed to be able to change. Another analogy is all the holes in the Java runtime sandboxes that have made the news. This is the same sort of bug.-- o----------0-¬---------O-·---¬----o---®-----o o O ° . | http://www.kiffen.de | pRoteçt y0ur bRaín |0 O ° ¤ ° · 0°·³°²'²³-¹'³´³°^°³~³²³°'³²²¨³²^³¹³²°²³`³º³°Þ ° o © ° . · | psychedelic experience | gott@kiffen.de | O ° o ° o-¬--o--0-----©-·--O-----o-----0-¤----------o 0 ° · ° . ¤ ·