[prev in list] [next in list] [prev in thread] [next in thread] 

List:       php-cvs
Subject:    [PHP-CVS] com php-src: Improve php-fpm systemd unit file: sapi/fpm/php-fpm.service.in
From:       Remi Collet <remi () php ! net>
Date:       2016-06-29 4:48:06
Message-ID: php-mail-edc54e65e178e8a5b02dfd758865861d413105697 () git ! php ! net
[Download RAW message or body]

Commit:    d53fa7f451ba3647fd417ce53dfd439282cb1b33
Author:    Remi Collet <remi@php.net>         Wed, 29 Jun 2016 06:48:06 +0200
Parents:   0a4f89bc292c3c82ff719cd79e66ef96c2079526
Branches:  master

Link:       http://git.php.net/?p=php-src.git;a=commitdiff;h=d53fa7f451ba3647fd417ce53dfd439282cb1b33

Log:
Improve php-fpm systemd unit file

- use PrivateTmp, now available everwhere, for better security
- add comment about how to customize the unit file

Changed paths:
  M  sapi/fpm/php-fpm.service.in


Diff:
diff --git a/sapi/fpm/php-fpm.service.in b/sapi/fpm/php-fpm.service.in
index a2df30e..e2c8074 100644
--- a/sapi/fpm/php-fpm.service.in
+++ b/sapi/fpm/php-fpm.service.in
@@ -1,3 +1,7 @@
+# It's not recommended to modify this file in-place, because it
+# will be overwritten during upgrades.  If you want to customize,
+# the best way is to use the "systemctl edit" command.
+
 [Unit]
 Description=The PHP FastCGI Process Manager
 After=syslog.target network.target
@@ -7,6 +11,7 @@ Type=@php_fpm_systemd@
 PIDFile=@localstatedir@/run/php-fpm.pid
 ExecStart=@sbindir@/php-fpm --nodaemonize --fpm-config @sysconfdir@/php-fpm.conf
 ExecReload=/bin/kill -USR2 $MAINPID
+PrivateTmp=true
 
 [Install]
 WantedBy=multi-user.target


--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[prev in list] [next in list] [prev in thread] [next in thread]