Bug #80682 [Asn->Csd]: opcache doesn't honour pcre.hit option

Edit report at https://bugs.php.net/bug.php?id=80682&edit=1 ID: 80682 Updated by: remi@php.net Reported by: remi@php.net Summary: opcache doesn't honour pcre.hit option -Status: Assigned +Status: Closed Type: Bug Package: PCRE related PHP Version: 7.3.26 Assigned To: remi Block user comment: N Private report: N New Comment: Automatic comment on behalf of remi Revision: http://git.php.net/?p=php-src.git;a=commit;h=067f7e4150d8f9bddf6b198c9c7826565ee549b0 Log: Fix #80682 opcache doesn't honour pcre.jit option Previous Comments: ------------------------------------------------------------------------ [2021-01-28 15:20:03] remi@php.net The following pull request has been associated: Patch Name: use pcre.jit only if enabled On GitHub: https://github.com/php/php-src/pull/6647 Patch: https://github.com/php/php-src/pull/6647.patch ------------------------------------------------------------------------ [2021-01-28 15:19:31] remi@php.net Description: ------------ We have a buildtime option HAVE_PCRE_JIT_SUPPORT and a runtime option for pcre2 jit usage PCRE_G(jit) opcache only honour buildtime option, not the runtime one. This raise AVC on SElinux enabled system Test script: --------------- Start php-fpm service Expected result: ---------------- No AVC Actual result: -------------- type=AVC msg=audit(1611840254.138:10844): avc: denied { execmem } for pid=328163 comm="php-fpm" scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=process permissive=1 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=80682&edit=1