sebschlicht/ansible-nas

restrict PHP-accessible directories

sebschlicht opened this issue 4 years ago · 0 comments

sebschlicht commented 4 years ago

use open_basedir to limit the file-based access of PHP to

/dev/urandom
Nextcloud
Nextcloud data

https://docs.nextcloud.com/server/latest/admin_manual/installation/harden_server.html#give-php-read-access-to-dev-urandom
https://help.nextcloud.com/t/how-to-check-that-php-can-use-dev-urandom/26458