After a PCI scan identified guestbook.cgi as a risk, I want to disable the cgi-scripts installed by WHM (v11, running on CentOS5). I would like to do this "properly" using the WHM Web interface if possible (so this configuration survives an update and is easily reproduced).
Things I've tried so far that aren't satisfactory:
chmod 0 /usr/local/cpanel/base/cgi-sys/guestbook.cgi
chattr +i /usr/local/cpanel/base/cgi/guestbook.cgi
= throws a 500 Internal Server Error when visiting example.com/cgi-sys/guestbook.cgi and may interfere with automatic updates
WHM | Packages | Feature Manager | Edit a Feature List
Disabled CGI Center
Disabled Email Scripts (cgiemail,formmail)
Disabled Simple Guestbook
Disabled Advanced Guestbook
= no change when visiting example.com/cgi-sys/guestbook.cgi (HTTP200 No Username given)
I've search forums.cpanel.net, which are usually pretty good but I can't find an answer that doesn't have undesirable side effects.