How to disable access from php to a number of system utilities?

Question

linux

PHP, through the system command and the like, has access to both harmless functions and those to which access must be denied.
disable_functions allows you to block access to php functions.
But how to disable system functions? Or better yet, whitelisted.
Sites work from different users via httpd.itk, i.e. if the answer is in the fine-tuning of the system user, then a recipe is desirable - how to do this conveniently for each new one.

Answer 1

If you have free time and want new experiences, install the Suhosin extension and configure suhosin.executor.eval.whitelist and/or suhosin.executor.eval.blacklist ( suhosin.org/stories/configuration.html#suhosin-exe... )