FarCry - Running in a "Sandbox" under Linux
(Example for Enviroment: "ColdFusion 8, Debian Linux 4.0 ETCH, Apache2-Webserver with Wrapper, FarCry 5.1.x install under the webroot")
- Login to your "ColdFusion Administrator Account"
- Navigate to "Security -> Sandbox Security"
- Then -> "Enable ColdFusion Security" and "Submit Changes"
- Add the path in "Add Security Sandbox" for your FarCry Installation
For example: /var/www/webX/html (the path of your real webroot) - Now edit the new created "Sandbox" with the following parameters:
DATA SOURCES
Disable ALL datasource that do not belong to your FC-Project !
CF TAGS - Disable the following CF-Tags:
- CFDBInfo
- CFFTP
- CFRegistry
CF FUNCTIONS - Disable the following CF-Functions:
- CreateObject(.NET)
- CreateObject(COM)
- CreateObject(CORBA)
- CreateObject(WebService)
- GetTempFile
- SetProfileString