From 412793731f81375255c5c30be4308a327661ac89 Mon Sep 17 00:00:00 2001 From: Ben Yanke Date: Thu, 9 Mar 2023 00:57:13 -0500 Subject: [PATCH 1/2] Fix snuffleupagus rules to allow nc talk https://github.com/Wonderfall/docker-nextcloud/issues/108 --- rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules | 1 + 1 file changed, 1 insertion(+) diff --git a/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules b/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules index 430d549..3b61fcb 100644 --- a/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules +++ b/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules @@ -46,6 +46,7 @@ sp.disable_function.function("ini_get").param("option").value("open_basedir").fi sp.disable_function.function("ini_get").param("option").value("open_basedir").filename("/nextcloud/3rdparty/symfony/process/ExecutableFinder.php").allow(); sp.disable_function.function("ini_get").param("option").value("allow_url_fopen").filename("/nextcloud/3rdparty/guzzlehttp/guzzle/src/Utils.php").allow(); sp.disable_function.function("exec").param("command").value("apachectl -M | grep mpm").filename("/nextcloud/apps2/spreed/lib/Settings/Admin/AdminSettings.php").allow(); +sp.disable_function.function("function_exists").filename("/nextcloud/apps2/spreed/lib/Settings/Admin/AdminSettings.php").allow(); # Harden the `chmod` function (0777 (oct = 511, 0666 = 438) sp.disable_function.function("chmod").param("permissions").value("438").drop(); From 66373e1296bfd947347a51500a622a9e98d125a8 Mon Sep 17 00:00:00 2001 From: Ben Yanke Date: Thu, 9 Mar 2023 01:04:43 -0500 Subject: [PATCH 2/2] Update nextcloud-php8.rules --- rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules b/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules index 3b61fcb..0b8e0fe 100644 --- a/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules +++ b/rootfs/usr/local/etc/php/snuffleupagus/nextcloud-php8.rules @@ -46,7 +46,7 @@ sp.disable_function.function("ini_get").param("option").value("open_basedir").fi sp.disable_function.function("ini_get").param("option").value("open_basedir").filename("/nextcloud/3rdparty/symfony/process/ExecutableFinder.php").allow(); sp.disable_function.function("ini_get").param("option").value("allow_url_fopen").filename("/nextcloud/3rdparty/guzzlehttp/guzzle/src/Utils.php").allow(); sp.disable_function.function("exec").param("command").value("apachectl -M | grep mpm").filename("/nextcloud/apps2/spreed/lib/Settings/Admin/AdminSettings.php").allow(); -sp.disable_function.function("function_exists").filename("/nextcloud/apps2/spreed/lib/Settings/Admin/AdminSettings.php").allow(); +sp.disable_function.function("function_exists").param("function").value("exec").filename("/nextcloud/apps2/spreed/lib/Settings/Admin/AdminSettings.php").allow(); # Harden the `chmod` function (0777 (oct = 511, 0666 = 438) sp.disable_function.function("chmod").param("permissions").value("438").drop();