<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Rocky Linux - Quelques pensées</title>
	<atom:link href="https://blog.neurozone.fr/category/rocky-linux/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.neurozone.fr/category/rocky-linux/</link>
	<description>Terres dévastées</description>
	<lastBuildDate>Mon, 02 Nov 2026 12:28:39 +0000</lastBuildDate>
	<language>fr-FR</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://i0.wp.com/blog.neurozone.fr/wp-content/uploads/2024/03/cropped-2.png?fit=32%2C32&#038;ssl=1</url>
	<title>Rocky Linux - Quelques pensées</title>
	<link>https://blog.neurozone.fr/category/rocky-linux/</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">154219366</site>	<item>
		<title>php-fpm jit selinux opcache issue</title>
		<link>https://blog.neurozone.fr/2024/03/29/php-fpm-jit-selinux-opcache-issue/</link>
					<comments>https://blog.neurozone.fr/2024/03/29/php-fpm-jit-selinux-opcache-issue/#respond</comments>
		
		<dc:creator><![CDATA[Hécate Raven]]></dc:creator>
		<pubDate>Fri, 29 Mar 2024 09:18:16 +0000</pubDate>
				<category><![CDATA[Informatique]]></category>
		<category><![CDATA[php-fpm]]></category>
		<category><![CDATA[Rocky Linux]]></category>
		<category><![CDATA[Selinux]]></category>
		<category><![CDATA[jit]]></category>
		<category><![CDATA[selinux]]></category>
		<guid isPermaLink="false">https://blog.neurozone.fr/?p=1348</guid>

					<description><![CDATA[<p>Activer le JIT de php-fpm provoque des segfaults et « mprotect() failed [13] Permission denied » : la solution est setsebool -P httpd_execmem 1.</p>
<p>L’article <a href="https://blog.neurozone.fr/2024/03/29/php-fpm-jit-selinux-opcache-issue/">php-fpm jit selinux opcache issue</a> est apparu en premier sur <a href="https://blog.neurozone.fr">Quelques pensées</a>.</p>
]]></description>
										<content:encoded><![CDATA[<p>I had issues when trying to enable jit for php-fpm, segfault, core dumpt etc&#8230;:</p>
php-fpm[10021]: segfault at 55ad7b400600 ip 000055ad7b400600 sp 00007ffc04059b30 error 15 in zero (deleted)[55ad3b400000+80000000] likely on CPU 4 (core 0, socket 0)
php-fpm[27109]: mprotect() failed [13] Permission denied

<h2 class="wp-block-heading">Why the php-fpm JIT crashes under SELinux</h2>

After searching on google I found nothing really useful. But digging more made me find this: 
https://github.com/php/php-src/issues/13400
Only for MacOS, still not useful

But the mprotect thing led me to that: https://lkml.org/lkml/2023/12/14/436
Interesting.
And to that: https://bugzilla.kernel.org/show_bug.cgi?id=218258
But THIS: https://bugzilla.redhat.com/show_bug.cgi?id=1380930
Yes, tried and it wxas the answer !!!!

so: setsebool -P httpd_execmem 1
systemctl restart php-fpm
issue solved !
#php-fpm #selinux #opcache #jit


<h2 class="wp-block-heading">Articles liés</h2>



<ul class="wp-block-list"><li><a href="https://blog.neurozone.fr/?p=1352">Durcir des services systemd avec php-fpm</a></li><li><a href="https://blog.neurozone.fr/?p=1001">Optimiser php-fpm, guide de Geekflare</a></li><li><a href="https://blog.neurozone.fr/?p=2885">PHP2Shell, les failles PHP d&rsquo;octobre 2026</a></li></ul>

<p>L’article <a href="https://blog.neurozone.fr/2024/03/29/php-fpm-jit-selinux-opcache-issue/">php-fpm jit selinux opcache issue</a> est apparu en premier sur <a href="https://blog.neurozone.fr">Quelques pensées</a>.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://blog.neurozone.fr/2024/03/29/php-fpm-jit-selinux-opcache-issue/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1348</post-id>	</item>
	</channel>
</rss>
