Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:40102 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 46693 invoked from network); 27 Aug 2008 13:14:35 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 27 Aug 2008 13:14:35 -0000 Authentication-Results: pb1.pair.com header.from=indeyets@gmail.com; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=indeyets@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.44.29 as permitted sender) DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: indeyets@gmail.com X-Host-Fingerprint: 74.125.44.29 yx-out-2324.google.com Received: from [74.125.44.29] ([74.125.44.29:47840] helo=yx-out-2324.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 18/09-03720-A3355B84 for ; Wed, 27 Aug 2008 09:14:34 -0400 Received: by yx-out-2324.google.com with SMTP id 3so1289955yxj.83 for ; Wed, 27 Aug 2008 06:14:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=gSUVbKCcw2d6Tx9ARefkHiN2iPiNZjJdNQhH3f8k1l8=; b=ILq/4y6hsEl7NR1o+KFjmhm/aLqMSN6K37/Kiad//jdImvU0fMnigu8g0ziajayshc tqFIoo3mKVuyfOnmgBGrI6gMywkzI9A9DzBZz1ilSZowNHDoPg8vsi1X61N/U3LLDK3a bqMn61VanC5993sscmUIN5g/WmA2fS4p73mU8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=Bi2cyI+byh+93PWCNnZD+46GRQlX9v3UHROkZvYqmRNpMcDpc0BHTX/Hn0ko9zeoOW lxn64wofaDtqOYMRjZZk37BGuK6Xi6KuAT7V4fj2lXOqomrs5hzh9h6hgHCx2gJbzDPR Y3Z//KkfgEiaUEUZxFVkR4NRfw84Y5TaKndTg= Received: by 10.151.153.19 with SMTP id f19mr107549ybo.116.1219842871209; Wed, 27 Aug 2008 06:14:31 -0700 (PDT) Received: by 10.150.186.11 with HTTP; Wed, 27 Aug 2008 06:14:31 -0700 (PDT) Message-ID: Date: Wed, 27 Aug 2008 17:14:31 +0400 To: "PHP Internals" In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: Subject: Re: open_basedir + sessions bug (or a feature?) From: indeyets@gmail.com ("Alexey Zakhlestin") well, in case there are no objections I will remove special treatment of "/tmp" path in sessions code of 5.3 and 6.0 should 5.2 also be "fixed"? On Wed, Aug 27, 2008 at 12:30 PM, Alexey Zakhlestin wrote: > ext/sessions/mod_files.c:281 has a hardcoded openbasedir-check > skipping of "/tmp" path for storing session-files, if > sessions.save_path is not manually set. > > This leads to the failure of session_save_path_variation5 test on mac > os x, as default temporary path here is "/var/tmp" and not "/tmp" > > Anyway, this looks like something done wrong from the beginning. > Shouldn't "/tmp" be explicitly added to open_basedir list? Why should > it have any special meaning? > I propose to remove special treatment of "/tmp" (should be mentioned > in upgrade-docs) > > Other option would be to skip check for any path, which is returned by > php_get_temporary_directory() call, but that sounds like a very bad > idea. > > -- > Alexey Zakhlestin > http://blog.milkfarmsoft.com/ > -- Alexey Zakhlestin http://blog.milkfarmsoft.com/