diff options
| author | Jakub Zelenka <bukka@php.net> | 2019-12-01 17:17:30 +0000 |
|---|---|---|
| committer | Jakub Zelenka <bukka@php.net> | 2019-12-01 17:17:30 +0000 |
| commit | 2a742546bfb40fe241c5e5b972aeaa61a77fb634 (patch) | |
| tree | 877e9e9307b08d524262c823081a79799b571b40 /sapi | |
| parent | c0e049656c9f37e1dddbe2899af2b7afbcaa7e45 (diff) | |
| parent | 67cd4271e922ee3082b416a7563598274d13a1e5 (diff) | |
| download | php-git-2a742546bfb40fe241c5e5b972aeaa61a77fb634.tar.gz | |
Merge branch 'PHP-7.4'
Diffstat (limited to 'sapi')
| -rw-r--r-- | sapi/fpm/php-fpm.service.in | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/sapi/fpm/php-fpm.service.in b/sapi/fpm/php-fpm.service.in index 857cb0e8f1..f58ea08af8 100644 --- a/sapi/fpm/php-fpm.service.in +++ b/sapi/fpm/php-fpm.service.in @@ -32,13 +32,6 @@ NoNewPrivileges=true # but no physical devices such as /dev/sda. PrivateDevices=true -# Required for dropping privileges and running as a different user -CapabilityBoundingSet=CAP_SETGID CAP_SETUID - -# Attempts to create memory mappings that are writable and executable at the same time, -# or to change existing memory mappings to become executable are prohibited. -MemoryDenyWriteExecute=true - # Explicit module loading will be denied. This allows to turn off module load and unload # operations on modular kernels. It is recommended to turn this on for most services that # do not need special file systems or extra kernel modules to work. |