Terres dévastées

Catégorie : php-fpm

Hardening systemd services is hard.

Especially when you want to harden php-pm services with jit enabled and with nextcloud running… More infos later

php-fpm jit selinux opcache issue

I had issues when trying to enable jit for php-fpm, segfault, core dumpt etc…:
php-fpm[10021]: segfault at 55ad7b400600 ip 000055ad7b400600 sp 00007ffc04059b30 error 15 in zero (deleted)[55ad3b400000+80000000] likely on CPU 4 (core 0, socket 0)
php-fpm[27109]: mprotect() failed [13] Permission denied

After searching on google I found nothing really useful. But digging more made me find this:
Only for MacOS, still not useful

But the mprotect thing led me to that: https://lkml.org/lkml/2023/12/14/436
And to that: https://bugzilla.kernel.org/show_bug.cgi?id=218258
But THIS: https://bugzilla.redhat.com/show_bug.cgi?id=1380930
Yes, tried and it wxas the answer !!!!

so: setsebool -P httpd_execmem 1
systemctl restart php-fpm
issue solved !
#php-fpm #selinux #opcache #jit

Fièrement propulsé par WordPress & Thème par Anders Norén