Your message dated Thu, 12 May 2016 10:08:07 +0000
with message-id <[email protected]>
and subject line Bug#823973: fixed in php7.0 7.0.6-7
has caused the Debian Bug report #823973,
regarding php7.0-fpm: add more systemd features to the unit file
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
823973: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823973
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: php7.0-fpm
Severity: wishlist
Tags: patch
Dear Maintainer,
please see attached patch. It will add some systemd features for a
more secure environment.
Greets,
Jonasdiff --git a/php-fpm.service b/php-fpm.service
index 5621b29..130cc7e 100644
--- a/php-fpm.service
+++ b/php-fpm.service
@@ -10,6 +10,9 @@ ExecStartPre=/usr/lib/php/php@PHP_VERSION@-fpm-checkconf
ExecStart=/usr/sbin/php-fpm@PHP_VERSION@ --nodaemonize --fpm-config /etc/php/@PHP_VERSION@/fpm/php-fpm.conf
ExecReload=/usr/lib/php/php@PHP_VERSION@-fpm-checkconf
ExecReload=/bin/kill -USR2 $MAINPID
+ProtectSystem=full
+PrivateTmp=true
+PrivateDevices=true
[Install]
WantedBy=multi-user.target
--- End Message ---
--- Begin Message ---
Source: php7.0
Source-Version: 7.0.6-7
We believe that the bug you reported is fixed in the latest version of
php7.0, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ondřej Surý <[email protected]> (supplier of updated php7.0 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 12 May 2016 10:47:10 +0200
Source: php7.0
Binary: libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-cgi php7.0-cli
php7.0-dev php7.0-fpm php7.0-phpdbg php7.0-xsl php7.0-odbc php7.0-readline
php7.0-recode php7.0-sqlite3 php7.0-xml php7.0-zip php7.0-sybase php7.0-gd
php7.0-gmp php7.0-ldap php7.0-common php7.0-intl php7.0-mysql php7.0-mcrypt
php7.0-snmp php7.0-curl php7.0-json php7.0-pgsql php7.0-mbstring php7.0-enchant
php7.0-imap php7.0-opcache php7.0-bcmath php7.0-tidy php7.0-soap
php7.0-interbase php7.0-xmlrpc php7.0-pspell php7.0-bz2
Architecture: source
Version: 7.0.6-7
Distribution: unstable
Urgency: medium
Maintainer: Debian PHP Maintainers <[email protected]>
Changed-By: Ondřej Surý <[email protected]>
Description:
libapache2-mod-php7.0 - server-side, HTML-embedded scripting language (Apache
2 module)
libphp7.0-embed - HTML-embedded scripting language (Embedded SAPI library)
php7.0 - server-side, HTML-embedded scripting language (metapackage)
php7.0-bcmath - Bcmath module for PHP
php7.0-bz2 - bzip2 module for PHP
php7.0-cgi - server-side, HTML-embedded scripting language (CGI binary)
php7.0-cli - command-line interpreter for the PHP scripting language
php7.0-common - documentation, examples and common module for PHP
php7.0-curl - CURL module for PHP
php7.0-dev - Files for PHP7.0 module development
php7.0-enchant - Enchant module for PHP
php7.0-fpm - server-side, HTML-embedded scripting language (FPM-CGI binary)
php7.0-gd - GD module for PHP
php7.0-gmp - GMP module for PHP
php7.0-imap - IMAP module for PHP
php7.0-interbase - Interbase module for PHP
php7.0-intl - Internationalisation module for PHP
php7.0-json - JSON module for PHP
php7.0-ldap - LDAP module for PHP
php7.0-mbstring - MBSTRING module for PHP
php7.0-mcrypt - libmcrypt module for PHP
php7.0-mysql - MySQL module for PHP
php7.0-odbc - ODBC module for PHP
php7.0-opcache - Zend OpCache module for PHP
php7.0-pgsql - PostgreSQL module for PHP
php7.0-phpdbg - server-side, HTML-embedded scripting language (PHPDBG binary)
php7.0-pspell - pspell module for PHP
php7.0-readline - readline module for PHP
php7.0-recode - recode module for PHP
php7.0-snmp - SNMP module for PHP
php7.0-soap - SOAP module for PHP
php7.0-sqlite3 - SQLite3 module for PHP
php7.0-sybase - Sybase module for PHP
php7.0-tidy - tidy module for PHP
php7.0-xml - DOM, SimpleXML, WDDX, XML, and XSL module for PHP
php7.0-xmlrpc - XMLRPC-EPI module for PHP
php7.0-xsl - XSL module for PHP (dummy)
php7.0-zip - Zip module for PHP
Closes: 823815 823973
Changes:
php7.0 (7.0.6-7) unstable; urgency=medium
.
* Add more systemd features to protect host system (Closes: #823973)
* Remove php-gettext from phpX.Y-common provides as it clashes with
existing package (Closes: #823815)
Checksums-Sha1:
2b172e1b524358486b437d230e33aa831203380c 5592 php7.0_7.0.6-7.dsc
d7ee1fc9cb82195bb8db00e297f5fe070a3bfdd6 60480 php7.0_7.0.6-7.debian.tar.xz
Checksums-Sha256:
6d1b4ddb82aab5190d29c1622ca77d5e388b4f8db9a97751f06ccf89128e6d03 5592
php7.0_7.0.6-7.dsc
d461b88da31d06452403cfff82ba45dc11d78cef9670d3bd0c4b6340896c14aa 60480
php7.0_7.0.6-7.debian.tar.xz
Files:
ccdf4dca357c7d93f8e25a736bfc9395 5592 php optional php7.0_7.0.6-7.dsc
67bcd6d0b14f28c017fda49db9b66fac 60480 php optional
php7.0_7.0.6-7.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQJ8BAEBCgBmBQJXNE3rXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzMEI5MzNEODBGQ0UzRDk4MUEyRDM4RkIw
Qzk5QjcwRUY0RkNCQjA3AAoJEAyZtw70/LsH2ToQAMP8dMw+sr/XE6cRo6Kce4iy
SqrTdm9iY0KzbN89wSjukYzgY3DcpqKe0Os33AXc+/IACNvHK7hyoMXpriM10A7h
3wEYlxdqLRF6PaFgMtht2SiQvgPFOfI85dW2RdddSwbhDPbVeynx3prli80o5yob
3HM6yez6HcL1fLVwxA/hS/egCF0vZsGaUCQaBO1QoGELq1csZxv+XKr2DC8VoGpC
J07u3TRRKhXfrmI6BkdgrrbNhSJ9j5DWfjr0OWiEY+BDGAqTuUwGJRi8YLQ9+xEm
8DCNe2gpw5JUml1HJY+/LZAKGhbYrXqNpIQGRpJmaj4EvbGhx53dX52wTOr1yw1S
7c8C+4BQBQicojg4JBzZeGcakP1H3cDTarYcaq5jl8+jDRLe1McYvGQqj+pyI818
gU41LFf1ZtZEjS1/J26knTbGgvT9sQDPuqBm06jR4KPjUgxD+vWBGd1cqOrniycf
ADkD12Ic+Pi3+TsXkN1ZGTckb7qjopuiDwa2oeexqYHLbjpkWY+2kA+LITNF/iTg
j4uzp7RA+gsXoICq4lmN7rOMfgOSrSt4PZvOpyyIaBWWYvLYZD86GntYWO0Bq1Cf
lvzRE49r5H8yepB/iXg8ciGwNl21pSals6N3NZvUkhIQHgEgGwHRGshfiFJSnAf6
njwD/zSZy/HYrZYgX6c5
=FuzV
-----END PGP SIGNATURE-----
--- End Message ---
