Verified Commit 7bce52d3 authored by Florian Pritz's avatar Florian Pritz
Browse files

php: Enable opcache and opcache security settings



Before validate_root and validate_permission opcache was insecure in a
multiuser environment. Now it should be fine.

Signed-off-by: Florian Pritz's avatarFlorian Pritz <bluewind@xinu.at>
parent b94de5bb
...@@ -1742,10 +1742,10 @@ ldap.max_links = -1 ...@@ -1742,10 +1742,10 @@ ldap.max_links = -1
[opcache] [opcache]
; Determines if Zend OPCache is enabled ; Determines if Zend OPCache is enabled
;opcache.enable=0 ;opcache.enable=1
; Determines if Zend OPCache is enabled for the CLI version of PHP ; Determines if Zend OPCache is enabled for the CLI version of PHP
;opcache.enable_cli=0 ;opcache.enable_cli=1
; The OPcache shared memory storage size. ; The OPcache shared memory storage size.
;opcache.memory_consumption=64 ;opcache.memory_consumption=64
...@@ -1764,7 +1764,7 @@ ldap.max_links = -1 ...@@ -1764,7 +1764,7 @@ ldap.max_links = -1
; directory to the script key, thus eliminating possible collisions between ; directory to the script key, thus eliminating possible collisions between
; files with the same name (basename). Disabling the directive improves ; files with the same name (basename). Disabling the directive improves
; performance, but may break existing applications. ; performance, but may break existing applications.
;opcache.use_cwd=1 opcache.use_cwd=1
; When disabled, you must reset the OPcache manually or restart the ; When disabled, you must reset the OPcache manually or restart the
; webserver for changes to the filesystem to take effect. ; webserver for changes to the filesystem to take effect.
...@@ -1862,10 +1862,10 @@ ldap.max_links = -1 ...@@ -1862,10 +1862,10 @@ ldap.max_links = -1
;opcache.huge_code_pages=1 ;opcache.huge_code_pages=1
; Validate cached file permissions. ; Validate cached file permissions.
;opcache.validate_permission=0 opcache.validate_permission=1
; Prevent name collisions in chroot'ed environment. ; Prevent name collisions in chroot'ed environment.
;opcache.validate_root=0 opcache.validate_root=1
[curl] [curl]
; A default value for the CURLOPT_CAINFO option. This is required to be an ; A default value for the CURLOPT_CAINFO option. This is required to be an
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment