Bug #80682 [PATCH]: opcache doesn't honour pcre.hit option

Edit report at https://bugs.php.net/bug.php?id=80682&edit=1 ID: 80682 Patch added by: remi@php.net Reported by: remi@php.net Summary: opcache doesn't honour pcre.hit option Status: Open Type: Bug Package: PCRE related PHP Version: 7.3.26 Block user comment: N Private report: N New Comment: The following pull request has been associated: Patch Name: use pcre.jit only if enabled On GitHub: https://github.com/php/php-src/pull/6647 Patch: https://github.com/php/php-src/pull/6647.patch Previous Comments: ------------------------------------------------------------------------ [2021-01-28 15:19:31] remi@php.net Description: ------------ We have a buildtime option HAVE_PCRE_JIT_SUPPORT and a runtime option for pcre2 jit usage PCRE_G(jit) opcache only honour buildtime option, not the runtime one. This raise AVC on SElinux enabled system Test script: --------------- Start php-fpm service Expected result: ---------------- No AVC Actual result: -------------- type=AVC msg=audit(1611840254.138:10844): avc: denied { execmem } for pid=328163 comm="php-fpm" scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=process permissive=1 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=80682&edit=1