[BlueOnyx:03211] Re: php error

[Darrell D. Mobley]

> -----Original Message-----
> From: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it]
> On Behalf Of Michael Stauber
> Sent: Saturday, December 19, 2009 3:04 PM
> To: BlueOnyx General Mailing List
> Subject: [BlueOnyx:03139] Re: php error
> 
> Hi Darrell,
> 
> > > Say I had a production website at site4 and a development website at
> > > site5, and I wanted to enable safe_mode and safe_mode_gid so that I 
> > > could include a file from site4 on site5.  How do I avoid this:
> > >
> > > "SAFE MODE Restriction in effect.  The script whose uid/gid is 519/504

> > > is not allowed to access /file/path/filename.php owned by uid/gid 
> > > 531/503 in /another/path/anotherfile.php on line X."
> 
> You don't. At least you shouldn't.
> 
> Or would you want that the PHP script of customer A can access the PHP
> scripts of customer B?  You see where this leads to.
> 
> You cannot have safe mode on and then expect it to behave in such an
> unsecure fashion. When safe mode is on, site4's PHP scripts cannot access 
> site5's files and vice versa (due to UID and GID). Expecially not with 
> open_basedir in place anyway.

Are you saying that with SafeModeGid you cannot include site5 in the site4
group and expect SafeModeGid to recognize this?  Is this an open_basedir
issue or a SafeMode issue or both?

I added site4 to site5's group and visa versa without success.