Req #81704 [Com]: opcache.restrict_api not working with PHP-FPM

Edit report at https://bugs.php.net/bug.php?id=81704&edit=1 ID: 81704 Comment by: medd at gmail dot com Reported by: mr-manuel at outlook dot it Summary: opcache.restrict_api not working with PHP-FPM Status: Assigned Type: Feature/Change Request Package: opcache Operating System: Debian 11 PHP Version: Irrelevant Assigned To: bukka Block user comment: N Private report: N New Comment: only the pool in (https://pastelink.net/s5um5u7m/)github.com Previous Comments: ------------------------------------------------------------------------ [2023-02-22 07:10:15] medd at gmail dot com only the pool in which the script is executed. (https://www.liveinternet.ru/users/mybestsleepever/post498270603/)github.com ------------------------------------------------------------------------ [2023-02-22 06:57:45] medd at gmail dot com need more database for me. (https://youtube-br.googleblog.com/2016/07/conheca-os-selecionados-para-primeira.html?sc=1677048894462#c1448534739803183038/)github.com ------------------------------------------------------------------------ [2023-01-03 09:56:40] marlynrasavong at gmail dot com need more information in given words not easy to understand for me. (https://www.nexus-iceland.com/)github.com ------------------------------------------------------------------------ [2021-12-22 21:58:10] cmb@php.net Thanks for the clarification! I added that info to the PHP manual[1]. [1] <https://github.com/php/doc-en/commit/88333c7e4faf04190cf783247b470c7ea8b54196> ------------------------------------------------------------------------ [2021-12-22 20:44:35] bukka@php.net This is known issue and it's a current design of FPM where MINIT is done on master level and the shared memory is allocated just once. I think the best solution for that would be introducing a process manager that would control pool process and do MINIT but that's quite a lot of work so it will take some time. In any case this is not a security issue because pools are not considered as a security mechanism (read they don't provide full separtion). It is certainly not anything that we can change in the bug fixing release as it will require significant refactoring. This is a feature request though. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=81704 -- Edit this bug report at https://bugs.php.net/bug.php?id=81704&edit=1