note 110837 deleted from function.mail by danbrown
| From: | danbrown@php.net | Date: | Thu, 13 Dec 2012 15:59:52 +0000 |
| Subject: | note 110837 deleted from function.mail by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-192513@lists.php.net to get a copy of this message | ||
Note Submitter: lgb
----
mail() is a real nightmare from the view point of security. I am using apparmor and I noticed that
php-cgi wants to run the shell itself. Too bad, as I have a custom wrapper to replace sendmail for
PHP, but php wants to run it with the shell. Enabling the shell itself in the apparmor profile is
not so nice, I am not sure if I can understand while php needs the shell and why can't directly
execute the given binary :(