SUPHP cPanel open_basedir hardening

openbasedir-suphp-cpanel.sh

#!/bin/bash

value="open_basedir"

for USER in $(ls -I system /var/cpanel/users/)
do

if [ ! -f /home/$USER/.user.ini ]; then
    sudo -H -u$USER bash -c "echo 'open_basedir = /home/$USER:/tmp:/opt/cpanel/composer/bin/composer:/var/cpanel/php/sessions/' >> /home/$USER/.user.ini"
    chmod 0555 /home/$USER/.user.ini
elif ! grep -q "$value" "/home/$USER/.user.ini"; then
    sudo -H -u$USER bash -c "echo 'open_basedir = /home/$USER:/tmp:/opt/cpanel/composer/bin/composer:/var/cpanel/php/sessions/' >> /home/$USER/.user.ini"
    chmod 0555 /home/$USER/.user.ini
else
    echo Gospodin /home/$USER/.user.ini vec sadrzi basedir varijablu
fi

if [ ! -f /home/$USER/php.ini ]; then
    sudo -H -u$USER bash -c "echo 'open_basedir = /home/$USER:/tmp:/opt/cpanel/composer/bin/composer:/var/cpanel/php/sessions/' >> /home/$USER/php.ini"
    chmod 0555 /home/$USER/php.ini
elif ! grep -q "$value" "/home/$USER/php.ini"; then
    sudo -H -u$USER bash -c "echo 'open_basedir = /home/$USER:/tmp:/opt/cpanel/composer/bin/composer:/var/cpanel/php/sessions/' >> /home/$USER/php.ini"
    chmod 0555 /home/$USER/php.ini
else
    echo Gospodin /home/$USER/php.ini vec sadrzi basedir varijablu
fi

done