open_basedir directories too open?

[thoroughfare]

php_admin_value open_basedir /home/user/:/tmp/:/var/www/:/usr/local/lib/php/:/etc/virtual/

I was wondering, is there any need for /etc/virtual to be in the open_basedir directive?

Many thanks,
Matt

 

[dbeames]

I do not really see a reason for it. The /etc/virtual is for mail. So I do not see a real reason for having it in the basedir restrictions.

 

[thoroughfare]

That was my thinking too. It's from the DA template, perhaps someone from DA could enlighten me?

Matt

 

[gbjbaanb]

I used to run Plesk, and it had a quite severe open_basedir setting - just /tmp and the domain's http directory. I always thought that was the best approach - lock the website down to the minimum it needs to access.

 

[nobaloney]

This is only a guess...

Perhaps UebiMiau needs it?

Jeff

 

[Chrysalis]

I would guess they needed by webmail apps, try experimenting by removing the email dirs and run the webmail on your server then report back the results.