From: Tom Hughes <tom@compton.nu>
Date: Mon, 13 Jul 2020 18:12:20 +0000 (+0100)
Subject: Configure open_basedir for dmca site
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/22bfa5e6f8152e492f21ae2c972a164474cfdd61

Configure open_basedir for dmca site
---

diff --git a/cookbooks/dmca/templates/default/apache.erb b/cookbooks/dmca/templates/default/apache.erb
index bf53e2d2e..592c0d336 100644
--- a/cookbooks/dmca/templates/default/apache.erb
+++ b/cookbooks/dmca/templates/default/apache.erb
@@ -47,6 +47,8 @@
   DocumentRoot <%= @directory %>/html
 
   Options -Indexes
+
+  ProxyFCGISetEnvIf "true" PHP_ADMIN_VALUE "open_basedir=<%= @directory %>/html/:/usr/share/php/:/tmp/\ndisable_functions=exec,shell_exec,system,passthru,popen,proc_open"
 </VirtualHost>
 
 <Directory <%= @directory %>/html>