← Back to context Comment by pixl97 1 day ago Turning off is better than silent data manipulation by an attacker. 13 comments pixl97 Reply afdbcreid 1 day ago But not than assessment and controlled shutdown or access minimization. Turning off critical systems can result in deaths. jamesknelson 1 day ago This feels like it might be the trolley problem in real life.Turning it off may cause deaths. Letting it get ransomwared may cause more. Do you pull the lever to turn it off? hparadiz 1 day ago I can't believe I have to write this out in this thread of all places but there is a way to do this.You make sure www-data CANNOT write ANYWHERE on disk. Not /tmp/ Not to /var/www/. No where.Then make sure your sudoers has nothing weird in it.Finally disable www-data's ability to run basically anything that isn't required for the operation of your httpd or php-fpm et al.You then harden it further and further until an RCE does not matter because it's incapable of doing anything.tldr always treat httpd as untrusted. 10 replies →
afdbcreid 1 day ago But not than assessment and controlled shutdown or access minimization. Turning off critical systems can result in deaths. jamesknelson 1 day ago This feels like it might be the trolley problem in real life.Turning it off may cause deaths. Letting it get ransomwared may cause more. Do you pull the lever to turn it off? hparadiz 1 day ago I can't believe I have to write this out in this thread of all places but there is a way to do this.You make sure www-data CANNOT write ANYWHERE on disk. Not /tmp/ Not to /var/www/. No where.Then make sure your sudoers has nothing weird in it.Finally disable www-data's ability to run basically anything that isn't required for the operation of your httpd or php-fpm et al.You then harden it further and further until an RCE does not matter because it's incapable of doing anything.tldr always treat httpd as untrusted. 10 replies →
jamesknelson 1 day ago This feels like it might be the trolley problem in real life.Turning it off may cause deaths. Letting it get ransomwared may cause more. Do you pull the lever to turn it off? hparadiz 1 day ago I can't believe I have to write this out in this thread of all places but there is a way to do this.You make sure www-data CANNOT write ANYWHERE on disk. Not /tmp/ Not to /var/www/. No where.Then make sure your sudoers has nothing weird in it.Finally disable www-data's ability to run basically anything that isn't required for the operation of your httpd or php-fpm et al.You then harden it further and further until an RCE does not matter because it's incapable of doing anything.tldr always treat httpd as untrusted. 10 replies →
hparadiz 1 day ago I can't believe I have to write this out in this thread of all places but there is a way to do this.You make sure www-data CANNOT write ANYWHERE on disk. Not /tmp/ Not to /var/www/. No where.Then make sure your sudoers has nothing weird in it.Finally disable www-data's ability to run basically anything that isn't required for the operation of your httpd or php-fpm et al.You then harden it further and further until an RCE does not matter because it's incapable of doing anything.tldr always treat httpd as untrusted. 10 replies →
But not than assessment and controlled shutdown or access minimization. Turning off critical systems can result in deaths.
This feels like it might be the trolley problem in real life.
Turning it off may cause deaths. Letting it get ransomwared may cause more. Do you pull the lever to turn it off?
I can't believe I have to write this out in this thread of all places but there is a way to do this.
You make sure www-data CANNOT write ANYWHERE on disk. Not /tmp/ Not to /var/www/. No where.
Then make sure your sudoers has nothing weird in it.
Finally disable www-data's ability to run basically anything that isn't required for the operation of your httpd or php-fpm et al.
You then harden it further and further until an RCE does not matter because it's incapable of doing anything.
tldr always treat httpd as untrusted.
10 replies →