16

I have no open_basedir, php can access /etc /usr /proc /home etc… but not /tmp.

tmpfs is mount on /tmp (/tmp type tmpfs (rw)) That's also the reason I want to use the /tmp folder.

My files are owned by http (user for nginx and php) and readable by everyone.

sudo -u http cat /tmp/file is working but anything inside a php script does not (like file_exist() or file()).

edit : the error show in log :

PHP Warning:  file(/tmp/ydlw/pid): failed to open stream: No such file or directory in /srv/http/ydlw/status.php on line 267

edit2: I tested the issue the other way. I made

touch("/tmp/boo");
file_exist("/tmp/boo");

and file_exist return true so the file is created. Then I watched inside /tmp and no "boo" file can be found there. That's what I was afraid, php do not «see» the mount point. Why is that and how can I fix that ?

  • What is the error returned by those PHP functions? What does PHP error log show? – Tero Kilkanen Jul 23 '14 at 9:52
  • I added the error log – eephyne Jul 23 '14 at 9:55
  • Does this file /tmp/ydlw/pid exist in /tmp? If not, then that is the reason for the error message. – Tero Kilkanen Jul 23 '14 at 10:01
  • -rw-r--r-- 1 http http 343 23 juil. 10:12 /tmp/ydlw/pid – eephyne Jul 23 '14 at 10:03
  • What is your Linux distribution and PHP version and where did you get PHP from? – Michael Hampton Jul 23 '14 at 14:50
31

I found off why, well, someone gave me the global hint.

It's neither the fault of php or tmpfs. The culprit was systemd and his security system PrivateTmp.

For those who get in the same issue that I did, the service php (and probably some others) have the PrivateTmp option to true in the systemd script (/usr/lib/systemd/system).

In that case, a new /tmp is created and isolated from the other one. All the data save inside are deleted once the service is stopped.

It's a security measure since /tmp can contain a lot a sensitive informations and php script are not always secure.

To deactivate this, simply copy the script inside /etc/systemd/system (to avoid overwriting of your changes after an update) and set PrivateTmp to false.

You can also set two or more services to share the same /tmp using JoinsNamespaceOf.

For more information > man systemd.exec

  • 4
    Thank you for that! I spent the whole day trying to figure that out. My brain is melting off my nose for trying so hard to figure that out. – Marcelo Jul 28 '15 at 13:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.