Someone mentioned having a “comprehensive disable_functions set”…
I wanted to know if anyone would care to share their disable_functions= with us??
For my servers, I’m currently using the following disable_functions list:
disable_functions = exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
So far, I haven’t encountered any compatibility issues with the applications I host.
I also shared some additional PHP and server hardening recommendations in this thread, in case it’s useful to anyone:
I’m always interested in comparing configurations, so if anyone has suggestions or sees something worth adding or removing, I’d be happy to hear them.
I will add mine here tommorow