disable perl without affecting cpanel

[abbasb]

i have litespeed and cpanel both together
hoe can i disable perl and python permanently and securely for all users without affecting cpanel
there are many methods but all of them have some problems.
for example cpanel use perl and if we chmod perl bin directory some of cpanel functions will fails.
or if i change handler or mime types a user can reenable them by using an costume mime type
or if i disallow extensions by mod_security a user can change extension and run them

 

[webizen]

just revoke/remove execution permission of the perl/python binary

 

[abbasb]

just revoke/remove execution permission of the perl/python binary

as i said in my first post this will break cpanel because cpanel needs perl
please see below post in cpanel official forum

http://forums.cpanel.net/f5/how-disable-perl-all-users-132041.html#post572653

cPanel staff said: this will break cpanel.

please give a correct way,

 

[webizen]

Try

<IfModule litespeed>
DisableCgiOverride On
</IfModule>

"DisableCgiOverride On" is to prevent user from adding things like "AddHandler cgi-script .cgi .pl" at local .htaccess level.

 

[abbasb]

Hi added the -ExecCGI to /usr/local/apache/conf/includes/post_virtualhost_global.conf but .pl files still running.
my post_virtualhost_global.conf file is below

<Directory "/home">
        Options +All -FollowSymLinks +IncludesNOEXEC -Indexes +MultiViews +SymLinksIfOwnerMatch -ExecCGI
        AllowOverride All Options=Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
</Directory>

please tell me how can i disable .pl file running in litespeed also no one can override it.

 

[webizen]

our lab test confirms that adding -ExecCGI in post_virtualhost_global.conf will disable .pl (cgi) from running. "DisableCgiOverride On" is by default for 4.2.*.

you can try uncheck ExecCGI in WHM "Home => Service Configuration => Apache Configuration => Global Configuration"