ASL config: typo ALLOW_escapeshelarg
Posted: Mon May 26, 2014 7:53 am
We noticed an inconvenient typo in the ASL configuration. The variable that allows the PHP-function 'escapeshellarg' has a typo in it's name, causing "asl -s -f" to unfairly disable this function.
Impact:
The PHP-function 'escapeshellarg' will be disabled for all ALS 4 users that have enabled PHP checks, even if they have set the allow variable to "yes".
How to fix it?
Change ALLOW_escapeshelarg="yes" to ALLOW_escapeshellarg="yes" in /etc/asl/config, and run 'asl -s -f'
Impact:
The PHP-function 'escapeshellarg' will be disabled for all ALS 4 users that have enabled PHP checks, even if they have set the allow variable to "yes".
How to fix it?
Change ALLOW_escapeshelarg="yes" to ALLOW_escapeshellarg="yes" in /etc/asl/config, and run 'asl -s -f'