Disabling SSH functions

Exavor · 03-11-2008, 04:56 AM

Hi there,

I need to disable some SSH functions on our server in order to prevent users from compromising the server's data with the use of shell scripts etc.

Any idea how to disable:

show_source
system
shell_exec
passthru
exec
popen
proc_open

For all users except for root?

Thanks.

digen · 03-11-2008, 05:04 AM

These are PHP functions which you want to disable. Locate the php.ini configuration file and have the functions

Quote:

root@zeus [~]# php -i | grep php.ini
Configuration File (php.ini) Path => /usr/local/lib
Loaded Configuration File => /usr/local/lib/php.ini

vi /usr/local/lib/php.ini

Quote:

disable_functions = show_source,system,shell_exec,passthru,exec,popen,proc_open

Save the file and restart the web server.

Exavor · 03-11-2008, 07:31 AM

Quote:

Originally Posted by digen

These are PHP functions which you want to disable. Locate the php.ini configuration file and have the functions

vi /usr/local/lib/php.ini

Save the file and restart the web server.

Thanks for the prompt response. Will disabling those functions make those dodgy php shell scripts virtually useless? Or is there anything else you advise I do?

Thanks again.