How to run cacti on server with disabled php functions

[hawk82]

Hello,

I did a search on the forums and google and couldn't find an answer to my question. I'm running cacti 0.8.6h on Centos 3.6 server. I run the server myself. However, I like to run a somewhat tight ship. Currently have the following php functions disabled in /etc/php.ini:
disable_functions = system,passthru,popen,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec

Is there any way to get cacti running and retain those disabled functions? Is there a particular function I can remove, but still retain good php security on my server?

Thanks in advance.

[melchandra]

Are you asking if there is a way to make an exception for Cacti so that it can execute those PHP functions, or a way to modify Cacti so that it works without having to execute those PHP functions?

The answer to the former is no. You can't make an exception because that directive is only changeable in the php.ini file you can't override it in the httpd.conf file.

The latter... well it's open source so have fun!

[kemis]

Same topic, but slightly different question:

Assuming my current disable_functions list of:
disable_functions = show_source, system, shell_exec, passthru, phpinfo, exec, popen, proc_open, allow_url_fopen

Which of the ones I'm currently disabling need to be allowed in order for cacti to function properly?

Thanks,
Matt