On 5/5/26 3:03 AM, Andy Smith wrote:
Hi,
On Mon, May 04, 2026 at 10:41:58PM -0400, Paul M. Foster wrote:
I recently upgraded to testing. The main apps work fine. However, when i try
to run that same code in /home/paulf/public_html, I get a memory protection
error, something like "mprotect() failed [13] Permission denied" from
Apache/PHP. PHP is trying to write to a SQLite database, and the memory
error makes it return an error which acts like the database has bad
permissions.
You are aware that in testing the apache2.service systemd unit gained a
full array of hardening flags, right?
https://sources.debian.org/src/apache2/2.4.66-8/debian/apache2.NEWS?hl=75#L3-L81
ProtectHome will stop all writes to anything under /home, for a start.
There is a bit of a push in Debian to start using more of these
hardening flags which is probably why we are seeing an increase in the
number of issues caused by this.
This was in the NEWS for the package so they did try hard to tell you,
but admittedly I sometimes don't read every NEWS item on upgrade. You
really need to though if using testing because thinsg can change any
time and that's the point of NEWS.
Thanks,
Andy
Finding and commenting out that variable resolved the problem. (I tried
changing it to "read-write" to no avail.)
Thanks for the tip. I'll make a note of this for future upgrades.
Paul
--
Paul M. Foster
Personal Blog: http://noferblatz.com
Company Site: http://quillandmouse.com
Software Projects: https://gitlab.com/paulmfoster
https://codeberg.org/paulmfoster
https://github.com/paulmfoster
