Setting open_basedir to include /dev/urandom in php.ini (Security & setup warning)

help

#1

Hello, I've installed ownCloud (version 9.1.2) on a shared hosting environment (Linux running Apache & mySQL). In the admin section, I get the following Security & setup warnings:

/dev/urandom is not readable by PHP which is highly discouraged for security reasons. Further information can be found in our documentation.

Now, after reading the documentation, I see I have to configure my php.ini file to set open_basedir to include /dev/urandom. How do I do this correctly? My php.ini file doesn't include any mention of open_basedir.

Thanks much in advance –

Best,
DS


#2

Hi,

I have the same problem, but in my php.info, I have this:

; open_basedir, if set, limits all file operations to the defined directory
; and below. This directive makes most sense if used in a per-directory
; or per-virtualhost web server configuration file. This directive is
; NOT affected by whether Safe Mode is turned On or Off.
; http://php.net/open-basedir
; open_basedir =

I change the last line for:
open_basedir = /dev/urandom

But when I lance phpinfo.php the line about open_basedir keep only:
open_basedir /var/www/vhosts/*****/:/tmp/

If you have find solution, maybe yiou can help me.

Thanks