Safe mode + /usr/share/php

From: Date: Sun, 26 Aug 2001 04:20:41 +0000
Subject: Safe mode + /usr/share/php
Groups: php.general 
Request: Send a blank email to php-general+get-64473@lists.php.net to get a copy of this message
Is it possible to use safe mode yet allow all scripts to include any files from /usr/share/php? Normal users ain't gonna have *write* access to that directory, so it shouldn't be much of a security concern, I just don't know how to do this. I know that I can disable safe_mode and enable open_basedir, but that will create yet another security hole because normal users will be able to alter LD_LIBRARY_PATH, which is not a very good idea. AFAIK, they can make PHP load a custom glibc and thus gain root access to the box if I allow them to do that.

« previous php.general (#64473) next »