summaryrefslogtreecommitdiff
path: root/config/default.rules
diff options
context:
space:
mode:
authorjvoisin2018-02-26 11:15:09 +0100
committerjvoisin2018-02-26 11:15:09 +0100
commit384eee9344a50dc35695e4adc22e67a30508ac01 (patch)
tree5b3daf3fe751b2981869bb1e4d61a1a76fd180f7 /config/default.rules
parentb0fb67199808af09d78abc2ebfcdc10b8c45677c (diff)
Improve the previous commit
Diffstat (limited to 'config/default.rules')
-rw-r--r--config/default.rules2
1 files changed, 1 insertions, 1 deletions
diff --git a/config/default.rules b/config/default.rules
index 8ac4498..7e3ee53 100644
--- a/config/default.rules
+++ b/config/default.rules
@@ -5,7 +5,7 @@ sp.disable_function.function("chmod").param("mode").value_r("^[0-9]{2}[67]$").dr
5sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop(); 5sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop();
6 6
7# Since it's now burned, me might as well mitigate it publicly 7# Since it's now burned, me might as well mitigate it publicly
8sp.disable_function.function("putenv").param("setting").value_r("LD_PRELOAD").drop() 8sp.disable_function.function("putenv").param("setting").value_r("LD_").drop()
9 9
10##Prevent various `include`-related vulnerabilities 10##Prevent various `include`-related vulnerabilities
11sp.disable_function.function_r("^(?:require|include)_once$").value_r("\\.(?:php|php7|inc|tpl)$").allow(); 11sp.disable_function.function_r("^(?:require|include)_once$").value_r("\\.(?:php|php7|inc|tpl)$").allow();