PHP DNS resolving in chroot-ed environment
| From: | Georgi Hristozov | Date: | Mon, 27 Sep 2010 07:58:37 +0000 |
| Subject: | PHP DNS resolving in chroot-ed environment | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-308323@lists.php.net to get a copy of this message | ||
Hello,
I'm running a Gentoo-hardened box with PHP 5.2.14-pl0-gentoo (Suhosin
included) and Apache 2.2.16. mod_php is running in a chroot, using
mpm_peruser. Everything works OK, except the PHP DNS resolving, which I
need to access HTTP resources. It fails with both the curl and http
extensions.
With some stracing of the Apache child processes I found that PHP is
trying to access the following files: hosts, nsswitch.conf, resolv.conf
and the libnss libraries. I've copied them to the chroot, but the
resolving still fails. strace showed failed accesses to /dev/urandom
and /dev/log, but mounting /dev in the chroot didn't help.
My php.ini can be found at [1]. I'm setting the following additional
flags in the vhost configuration:
engine on
open_basedir "/htdocs:/sessions:/tmp"
session.save_path "/sessions"
upload_tmp_dir "/tmp"
Does anybody run similar chroot-ed PHP? Any help will be appreciated!
Thanks in advance!
[1] http://forkbomb.nl/temp/php.ini
Attachment: [application/pgp-signature] signature.asc
Attachment: [application/pgp-signature] signature.asc