Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Harden Tuleap MediaWiki PHP FPM SystemD unit

Download Browse

Add some additional limitation on what the process can write. In an ideal world we could restrict exactly where the process is supposed to read and write but this is not possible with the quite old version of SystemD coming with CentOS/Red Hat 7. To test: redeploy the unit, tell SystemD to do a `daemon-reload` and restart the service. Everything should continue to work. Part of story #26042: install mediawiki standalone Change-Id: Ic3842eb59920ccb6b7ea11152d4f8ccc24f23ed4

+6 −1
Thomas Gerbet (tgerbet) 2022-06-20 15:42
Thomas Gerbet (tgerbet) 2022-06-20 15:42
96553eeac88b86832e2f10924ec2dcc7c5119126
ec1b818c255c557523a629e77bcfca12a2533419
git #tuleap/stable/96553eeac88b86832e2f10924ec2dcc7c5119126

Modified Files

Side by side diff
Inline diff
Name
M plugins/mediawiki_standalone/etc/systemd/mediawiki-tuleap-php-fpm.service +6 −1 Go to diff View file