note 15023 deleted from security.apache by nlopess

Note Submitter: ---- [ED note: it's not advised to enable ext/posix in an environments where security is a concern, this is also noted in the manual at php.net/posix ] Using posix_kill() function you can kill the child servers of others vhosts. (httpd) If you use safe_mode_exec_dir to restrict a path for exec programs... and use the htdocs as restricted path, the user can upload a sh binary and exec anything. The best solution is modify suexec.c and make a chroot to restricted envs... one for each vhost.