[doc-en] master: docs(open_basedir): warn that Unix domain sockets are not restricted (#5846)

Author: Louis-Arnaud (lacatoire) Committer: GitHub (web-flow) Pusher: lacatoire Date: 2026-09-08T17:12:08+02:00 Commit: https://github.com/php/doc-en/commit/f011a5989304239063769239761b5c39c68af12f Raw diff: https://github.com/php/doc-en/commit/f011a5989304239063769239761b5c39c68af12f.diff docs(open_basedir): warn that Unix domain sockets are not restricted (#5846) Changed paths: M appendices/ini.core.xml Diff: diff --git a/appendices/ini.core.xml b/appendices/ini.core.xml index 4c0d228bb35b..ad026204b2c2 100644 --- a/appendices/ini.core.xml +++ b/appendices/ini.core.xml @@ -1338,6 +1338,15 @@ include_path = ".:${USER}/pear/php" to <literal>0</literal> and thus <emphasis>disable</emphasis> the realpath cache. </para> </note> + <warning> + <simpara> + <option>open_basedir</option> does not restrict access to Unix domain sockets. + PHP socket functions such as <function>stream_socket_client</function> and + <function>fsockopen</function> can connect to a Unix socket path + (e.g. <filename>unix:///var/run/docker.sock</filename>) + regardless of the <option>open_basedir</option> setting. + </simpara> + </warning> <caution> <para> <literal>open_basedir</literal> is just an extra safety net, that is in no way