On Wed, Jun 18, 2014 at 05:44:04PM -0700, Steve Beattie wrote:
> Allow php5 abstraction to access Zend opcache files.
> 
> [Personally, I don't really like things like this ending up in /tmp,
> as there's no need for it; but it's not obvious to me looking at
> http://www.php.net/manual/en/opcache.configuration.php if there's a
> way to configure things such that the opcache files end up in a php
> specific directory, that we could advocate packagers should make as
> the default.]

Blech. Annoying php.

Maybe add 'owner'? I'm not entirely sure how PHP expects these things to
be used but it feels like a sane thing to require that the reader and
writer be the same uid.

Acked-by: Seth Arnold <seth.arn...@canonical.com>

Thanks

> ---
>  profiles/apparmor.d/abstractions/php5 |    3 +++
>  1 file changed, 3 insertions(+)
> 
> Index: b/profiles/apparmor.d/abstractions/php5
> ===================================================================
> --- a/profiles/apparmor.d/abstractions/php5
> +++ b/profiles/apparmor.d/abstractions/php5
> @@ -30,3 +30,6 @@
>  
>    # MySQL extension
>    /usr/share/mysql/** r,
> +
> +  # Zend opcache
> +  /tmp/.ZendSem.* rwlk,
> 
> 

Attachment: signature.asc
Description: Digital signature

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to