Hi Remi,
I send this to Jakub Zelenka in regards a wrong/incomplete
implementation of chroot, would be nice to see this fixed in all php
versions of the redhat software collections repository.
========
I think some developer just got the group from the config file and
executed the chroot user with basic userspec, not thinking maybe the
host enviroment could have configured more groups. This could also be
solved maybe by setting more groups in the config file at group= or
special configuration entry for chroot groups
chroot
--userspec=USER:GROUP specify user and group (ID or name) to use
--groups=G_LIST specify supplementary groups as g1,g2,..,gN
--help display this help and exit
--version output version information and exit
========
Just wanted to let you know, I have noticed that when adding the chroot
in the config file, the additional groups are disappearing.
========
I have
strong beliefs that php-fpm is not starting correctly with all its
group
membership ids. I am migrating to new environment, I was sort of
expecting such a basic linux/os thing to work.
Httpd, php-fpm, running with apache.apache, see the difference
[@php-fpm.d]# ps -eo pid,comm,euser,supgrp | grep http
21117 httpd root -
21122 httpd apache apache,login0
21123 httpd apache apache,login0
21124 httpd apache apache,login0
21125 httpd apache apache,login0
21769 httpd apache apache,login0
[@php-fpm.d]# ps -eo pid,comm,euser,supgrp | grep php-fpm
21757 php-fpm root -
21758 php-fpm apache apache
I put more information here also:
http://news.php.net/php.general/326752
https://bugs.php.net/bug.php?id=77837
-----Original Message-----
From: Remi Collet [mailto:remi@xxxxxxx]
Sent: donderdag 18 april 2019 13:13
To: php-general
Subject: PHP version 7.2.18RC1 is available for testing
Hi,
PHP 7.2.18 RC1 was just released and can be downloaded from:
https://downloads.php.net/~remi/
Or using the git tag: php-7.2.18RC1
The Windows binaries are available at: http://windows.php.net/qa/
Please test it carefully, and report any bugs in the bug system.
7.2.18 should be expected in 2 weeks on July 19th, 2018.
Hash Values and GPG signatures can be found below.
Thank you, and happy testing!
Regards,
Sara Golemon & Remi Collet
php-7.2.18RC1.tar.gz
SHA256 hash:
00b36437311462e57687bac1b883bd6b29fb9baac6846f374ec5c59006ccaa2e
PGP signature:
-----BEGIN PGP SIGNATURE-----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=dk01
-----END PGP SIGNATURE-----
php-7.2.18RC1.tar.bz2
SHA256 hash:
b86d329b42f8c52f6992942c944805e1222db0895ab04f85ea04a5b50b45e102
PGP signature:
-----BEGIN PGP SIGNATURE-----
iQIcBAABAgAGBQJctbWtAAoJENyf+NPuWvJ/jt4QAL0TYijXmLumVhMfXbMYjxbn
Fzmlo+MKtizF/uxv3AwXJ1QqRgoDsZE0gf1Im/36x8mduZdXHQfE9NkVCGtPBir3
UG6tXjVQBsLyKPJ5pOAXs0GVNoi46TzvUFXZ4U0aQfYkwzwIoz91qL7m8UkwXh34
Eo3SLLtDFlTrF/Wy/5+hx/dm7AndVJoZXUOdHqrPBDNHNXuyoPFFwrBTnZGouw9a
uEGBY5u399mEhOE4dNDKjHfPRJlkmbpSl55o1ciicb/BKd3GHTNDokWrXhnbKfgX
1aX8+474zfasyhH7vv0tZI4JEe2D7ZG17DghJBlvSoVVZu9teNeU1+HySXfBxY4V
Q1frhK8FYbMTa5aN2+ko8gHp9lWO0G1d+DpEiotm7VIuCunK5k4OxHpDS9GqTqAa
PiOr2hwvU+/ioHb+OVg5NBBy7jQ3JTi/xtAyJheVNy4187yPa6xea1k1T8TwQW7k
ZQXG0hJaNgUnE7JXD9WGU/JEzh5Ag7lM19U64qdv2bmzY9k4//TLjh7abt9yOqta
naQ6tpvcEMqFGSiROFppw6SYKHHNgcB+ouqWr/THZLllvQsJxstLw5z2S+njHifR
ihnZm+3W+nR2LjDSguKocHwMsgNNz/79p+cP1ticz9LmvmDYm3LyNpEVJlFhAOg8
G7iTuYrXR/pcAhrNhJmY
=gbQ3
-----END PGP SIGNATURE-----
php-7.2.18RC1.tar.xz
SHA256 hash:
8e337ca09230f3a41c7ca49411746c272cdfbaa0d3c1c45d57deabd91fd9d037
PGP signature:
-----BEGIN PGP SIGNATURE-----
iQIcBAABAgAGBQJctbWvAAoJENyf+NPuWvJ/nOUQAI05i4JBLmYIH1EINbpD/mE0
lz9Fv61pL9mPfOamOCCoLbVJtMby/A1Fg+XZ4ZzWjwlkA+dbyqQXRmnnY2Nb6s5X
g7TTQTnmxwHc+23Ys+qhKXNkagNHMgQZAa7X2CNRJDcMtqNpslGSPo56V5yrCyle
zPYoeRnSs4K5fBAtKUPcr6n1CeJY8HuzeQPzXV20u7ISeLchLAbq6AZ4LyUGN35h
I14B70Gis74bwqYozeVdNoiavjjxaa/FWmSbA7xYsKpPsg3Fa6PNoSpBxsWfWxYw
KV7WNajbi12WgLdEf8dNrrYlvgSNQKeeUBF7LQTEbIDdK9JMT1K4AJF9FkLgLO6F
KrGzRNeR5pG4VdGPrAiwS5EJVeSVra9gYYAU5qC4omsDZ9dHRVfV6ul6f1hWwLHu
weY8j31yr/dTq9+kRs8JLin3g3sQ0QbBnjbQEtUuUKAKPAadE+FypnUhuL5qpzxo
AFpIxo6+/+nJ4NuEHhxx6f82VFDZLaOYSQ3TB5fvwboAHPlF87lelvlbqiEBGRNR
SYoEvvDFuvt+zHItL6soP5qjNlTBc81Z+oCxTTGCOZBxCzEAJZJdZJ98a0TCz6YT
R58e+hIvAd4EABkHl+S6/IWZC6jZ6kMpw8KxzOgk0MhhIVHWnz1gc5cB1Ppdl7TG
C0Hyf6cVHKo+oSRzwqT+
=mKFF
-----END PGP SIGNATURE-----
