Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches

From:	toni at lygon dot net	Date:	Thu, 24 Sep 2015 18:32:23 +0000
Subject:	Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-196217@lists.php.net to get a copy of this message

Edit report at https://bugs.php.net/bug.php?id=69090&edit=1

 ID:                 69090
 Comment by:         toni at lygon dot net
 Reported by:        simon at ikanobori dot jp
 Summary:            add prefix/xor to cache keys/check permissions or
                     separate caches
 Status:             Analyzed
 Type:               Feature/Change Request
 Package:            opcache
 Operating System:   linux/debian
 PHP Version:        5.6.5
 Block user comment: N
 Private report:     N

 New Comment:

I can replicate this with php5-fpm 5.5.9+dfsg-1ubuntu4.11.

I baffled how a huge security / usability problem like this can exist, yet nobody gives a poop about
it.
We've got a server with multiple sites chrooted using the same directory structure inside the
chrooted /.
Obviously this causes fatal problems as there are conflicts, like index.php in those hosts causing
it to randomly load from any of those.

Because of this, opcache can not be used as we can't change the directory structure.

Someone, please investigate this!


Previous Comments:
------------------------------------------------------------------------
[2015-07-26 17:10:12] thesparkdevelopment at gmail dot com

noescape at centrum dot sk:

I think open_basedir is useless in chroot

------------------------------------------------------------------------
[2015-07-16 19:09:25] noescape at centrum dot sk

I cannot seem to replicate this... But I got open basedir enabled. Can somebody verify that open
basedir solve it?

------------------------------------------------------------------------
[2015-06-14 09:04:02] thesparkdevelopment at gmail dot com

4 month for critical fix... it's bad...

------------------------------------------------------------------------
[2015-02-22 01:21:14] rasmus@php.net

Yes, it was one of the features we lost by dropping APC. It has been on our radar for a while to
fix, but nobody has gotten to writing the code yet.

------------------------------------------------------------------------
[2015-02-21 11:15:14] simon at ikanobori dot jp

I've written a more extensive post with more examples here: https://ikanobori.jp/php55-opcache-shared-hosting.html

Inodes seem to be a good idea, I think APC does it that way?

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=69090


--
Edit this bug report at https://bugs.php.net/bug.php?id=69090&edit=1


   

Thread (38 messages)

• simon at ikanobori dot jpFri, 20 Feb 2015 14:37:24 +0000
  • simon at ikanobori dot jpFri, 20 Feb 2015 14:38:51 +0000Req #69090 [Opn]: add prefix/xor to cache keys/check permissions or separate caches
  • rasmus@php.netSat, 21 Feb 2015 02:00:41 +0000Req #69090 [Opn->Ana]: add prefix/xor to cache keys/check permissions or separate caches
  • simon at ikanobori dot jpSat, 21 Feb 2015 11:15:14 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • rasmus@php.netSun, 22 Feb 2015 01:21:15 +0000Req #69090 [Ana]: add prefix/xor to cache keys/check permissions or separate caches
  • thesparkdevelopment at gmail dot comSun, 14 Jun 2015 09:04:03 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • noescape at centrum dot skThu, 16 Jul 2015 19:09:27 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • thesparkdevelopment at gmail dot comSun, 26 Jul 2015 17:10:16 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • toni at lygon dot netThu, 24 Sep 2015 18:32:23 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • michal_micko at centrum dot czTue, 03 Nov 2015 22:42:11 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • michal_micko at centrum dot czWed, 04 Nov 2015 09:14:08 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • admin at 3dr dot orgTue, 29 Mar 2016 09:51:43 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • rgpublic at gmx dot netFri, 03 Jun 2016 12:59:14 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • kmark937 at gmail dot comThu, 27 Oct 2016 05:39:46 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • jeff at mcneill dot ioWed, 02 Nov 2016 07:20:37 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netFri, 04 Nov 2016 10:33:09 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • jpauli@php.netFri, 04 Nov 2016 16:54:38 +0000Req #69090 [Ana]: add prefix/xor to cache keys/check permissions or separate caches
  • jeff at mcneill dot ioFri, 04 Nov 2016 17:11:40 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netFri, 04 Nov 2016 20:11:48 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • bjh438-git at yahoo dot comSun, 06 Nov 2016 17:27:07 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netSun, 06 Nov 2016 20:54:55 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • sjon at hortensius dot netMon, 07 Nov 2016 09:39:32 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • dol+list at cyon dot chMon, 07 Nov 2016 11:46:31 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netMon, 07 Nov 2016 15:13:23 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • kmark937 at gmail dot comTue, 08 Nov 2016 01:58:56 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netTue, 08 Nov 2016 07:06:24 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netTue, 08 Nov 2016 13:46:35 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • simon at ikanobori dot jpThu, 10 Nov 2016 08:40:37 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • php-dev at coydogsoftware dot netThu, 10 Nov 2016 14:25:12 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • sjon at hortensius dot netThu, 10 Nov 2016 14:59:53 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • dmitry@php.netTue, 15 Nov 2016 11:21:26 +0000Req #69090 [PATCH]: add prefix/xor to cache keys/check permissions or separate caches
  • dmitry@php.netTue, 15 Nov 2016 11:36:25 +0000Req #69090 [Ana]: add prefix/xor to cache keys/check permissions or separate caches
  • dmitry@php.netTue, 15 Nov 2016 15:11:12 +0000Req #69090 [PATCH]: add prefix/xor to cache keys/check permissions or separate caches
  • dmitry@php.netTue, 15 Nov 2016 15:15:49 +0000Req #69090 [Ana]: add prefix/xor to cache keys/check permissions or separate caches
  • dmitry@php.netTue, 15 Nov 2016 15:38:01 +0000Req #69090 [PATCH]: add prefix/xor to cache keys/check permissions or separate caches
  • dmitry@php.netWed, 16 Nov 2016 09:58:50 +0000Req #69090 [Ana->Csd]: add prefix/xor to cache keys/check permissions or separate caches
  • me at anatoli dot wsFri, 16 Dec 2016 04:01:30 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches
  • danieleckid at gmail dot comWed, 03 Oct 2018 12:00:55 +0000Req #69090 [Com]: add prefix/xor to cache keys/check permissions or separate caches