Hi Guys,
I really value your opinions and I think a lot of you share the same
paranoia I have. ;)
I've just loaded up a fresh server, and am using squirrelmail. I have
installed and am using gpg and ispell. The problem is, when Safe_mode=On,
gpg and ispell do not function. With Safe_mode=Off, they work just fine.
Is there a safe way to get these executables to run? I don't want to turn
Safe_mode=Off, that's just too dangerous in my book. Allowing the
shell_exec (?) is just a bit dangerous IMO too, but do I even have a
choice? If that is what needs to be done, how do I enable just that
function? Is it possible to enable it within just one vhost/dir? Is
encrypted email and spell checking worth this risk?
--
gentoo-security@gentoo.org mailing list
I really value your opinions and I think a lot of you share the same
paranoia I have. ;)
I've just loaded up a fresh server, and am using squirrelmail. I have
installed and am using gpg and ispell. The problem is, when Safe_mode=On,
gpg and ispell do not function. With Safe_mode=Off, they work just fine.
Is there a safe way to get these executables to run? I don't want to turn
Safe_mode=Off, that's just too dangerous in my book. Allowing the
shell_exec (?) is just a bit dangerous IMO too, but do I even have a
choice? If that is what needs to be done, how do I enable just that
function? Is it possible to enable it within just one vhost/dir? Is
encrypted email and spell checking worth this risk?
--
gentoo-security@gentoo.org mailing list