From: Remi Collet <remi@php.net>
Date: Wed, 29 Jun 2016 04:48:06 +0000 (+0200)
Subject: Improve php-fpm systemd unit file
X-Git-Tag: php-7.1.0alpha3~60
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=d53fa7f451ba3647fd417ce53dfd439282cb1b33;p=php

Improve php-fpm systemd unit file

- use PrivateTmp, now available everwhere, for better security
- add comment about how to customize the unit file
---

diff --git a/sapi/fpm/php-fpm.service.in b/sapi/fpm/php-fpm.service.in
index a2df30e28d..e2c807426b 100644
--- a/sapi/fpm/php-fpm.service.in
+++ b/sapi/fpm/php-fpm.service.in
@@ -1,3 +1,7 @@
+# It's not recommended to modify this file in-place, because it
+# will be overwritten during upgrades.  If you want to customize,
+# the best way is to use the "systemctl edit" command.
+
 [Unit]
 Description=The PHP FastCGI Process Manager
 After=syslog.target network.target
@@ -7,6 +11,7 @@ Type=@php_fpm_systemd@
 PIDFile=@localstatedir@/run/php-fpm.pid
 ExecStart=@sbindir@/php-fpm --nodaemonize --fpm-config @sysconfdir@/php-fpm.conf
 ExecReload=/bin/kill -USR2 $MAINPID
+PrivateTmp=true
 
 [Install]
 WantedBy=multi-user.target