Removal of open_basedir directive from around the standard ZPanel daemon.php (obviously this should not be restricted due to the nature and requirements of what this needs to do), retained however on the user generated Cron entries.
Added addition of suhosin blacklist to the user generated CRON file entries, need to be tested by the QA team to ensure that it works as expected and cron jobs cannot break out of their home directory OR execute sensitive commands as per the function blacklist.
Added addition of suhosin blacklist to the user generated CRON file entries, need to be tested by the QA team to ensure that it works as expected and cron jobs cannot break out of their home directory OR execute sensitive commands as per the function blacklist.