summaryrefslogtreecommitdiff
path: root/config/default.rules
diff options
context:
space:
mode:
Diffstat (limited to 'config/default.rules')
-rw-r--r--config/default.rules1
1 files changed, 0 insertions, 1 deletions
diff --git a/config/default.rules b/config/default.rules
index 88398c1..b52ae4c 100644
--- a/config/default.rules
+++ b/config/default.rules
@@ -1,6 +1,5 @@
1# Harden the `chmod` function 1# Harden the `chmod` function
2sp.disable_function.function("chmod").param("mode").value_r("^[0-9]{2}[67]$").drop(); 2sp.disable_function.function("chmod").param("mode").value_r("^[0-9]{2}[67]$").drop();
3sp.disable_function.function("chmod").param("mode").value_r("o\\+w$").drop();
4 3
5# Prevent various `mail`-related vulnerabilities 4# Prevent various `mail`-related vulnerabilities
6sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop(); 5sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop();