summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRemi Collet <fedora@famillecollet.com>2016-11-25 06:46:34 +0100
committerRemi Collet <fedora@famillecollet.com>2016-11-25 06:46:34 +0100
commit80eaa7aff77623bbb06f4336f3996ff5179dc17c (patch)
tree1e62b86f372e9df7abdb541d4aafb59c7d72fdc9
parentcd6ebf77ce29a444455b3fc1945d9dee211bbd28 (diff)
php 7+: disable pcre.jit as it raise selinux AVC
-rw-r--r--php.ini2
-rw-r--r--php.spec8
2 files changed, 3 insertions, 7 deletions
diff --git a/php.ini b/php.ini
index 569e807..a21ead4 100644
--- a/php.ini
+++ b/php.ini
@@ -941,7 +941,7 @@ cli_server.color = On
;Enables or disables JIT compilation of patterns. This requires the PCRE
;library to be compiled with JIT support.
-;pcre.jit=1
+pcre.jit=0
[Pdo]
; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off"
diff --git a/php.spec b/php.spec
index 3d414f0..573b953 100644
--- a/php.spec
+++ b/php.spec
@@ -1327,12 +1327,6 @@ make -C build-cgi install \
install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/
install -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/php.ini
-%if %{with_libpcre}
-if ! pkg-config libpcre --atleast-version 8.38 ; then
- sed -e 's/;pcre.jit=1/pcre.jit=0/' -i $RPM_BUILD_ROOT%{_sysconfdir}/php.ini
-fi
-%endif
-
# For third-party packaging:
install -m 755 -d $RPM_BUILD_ROOT%{_datadir}/php
@@ -1826,6 +1820,8 @@ fi
%changelog
+- disable pcre.jit everywhere as it raise AVC #1398474
+
* Wed Nov 23 2016 Remi Collet <remi@fedoraproject.org> 7.0.14-0.1.RC1
- Update to 7.0.14RC1