[apparmor] [patch 2/3] profiles: allow php5 abstraction access to Zend opcache files

Steve Beattie steve at nxnw.org
Thu Jun 19 00:44:04 UTC 2014

Allow php5 abstraction to access Zend opcache files.

[Personally, I don't really like things like this ending up in /tmp,
as there's no need for it; but it's not obvious to me looking at
http://www.php.net/manual/en/opcache.configuration.php if there's a
way to configure things such that the opcache files end up in a php
specific directory, that we could advocate packagers should make as
the default.]

 profiles/apparmor.d/abstractions/php5 |    3 +++
 1 file changed, 3 insertions(+)

Index: b/profiles/apparmor.d/abstractions/php5
--- a/profiles/apparmor.d/abstractions/php5
+++ b/profiles/apparmor.d/abstractions/php5
@@ -30,3 +30,6 @@
   # MySQL extension
   /usr/share/mysql/** r,
+  # Zend opcache
+  /tmp/.ZendSem.* rwlk,

More information about the AppArmor mailing list