How to prevent running binary files.

[reporter]

Hello,

Do you know how can I prevent running binary files from
cgi or shell access or php ...?
like this:
sh: /path/file: Permission denied

[bhd]

Depends what binary it is. Usually making sure it's ownership is root:root and changing it's permissions to 700 does the job.

[reporter]

Depends what binary it is. Usually making sure it's ownership is root:root and changing it's permissions to 700 does the job.

Thank you!
but I mean is user upload a binary and try to excute it!
not specific file to change the permission and owner:P

[reporter]

Hi,

There is many experts in this forums,
nobody know?

I want to prevent excuting binary files in /home,
then users can't excute any binary file by command from perl or php...


Thank you!

[ModServ]

Hello,

You can make a lot of options to do that such as

suphp.conf
php.ini

Also don't forget about
/etc/fstab => noexec,nosuid