Fix bug #78889 (php-fpm service fails to start)

atdt · Dec 1, 2019 · 67cd427 · 67cd427
1 parent 246b9db
commit 67cd427
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 7 deletions.
diff --git a/NEWS b/NEWS
@@ -15,6 +15,7 @@ PHP                                                                        NEWS
 - FPM:
   . Fixed bug #76601 (Partially working php-fpm ater incomplete reload).
     (Maksim Nikulin)
+  . Fixed bug #78889 (php-fpm service fails to start). (Jakub Zelenka)
 
 - OPcache:
   . Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).

diff --git a/sapi/fpm/php-fpm.service.in b/sapi/fpm/php-fpm.service.in
@@ -32,13 +32,6 @@ NoNewPrivileges=true
 # but no physical devices such as /dev/sda.
 PrivateDevices=true
 
-# Required for dropping privileges and running as a different user
-CapabilityBoundingSet=CAP_SETGID CAP_SETUID
-
-# Attempts to create memory mappings that are writable and executable at the same time,
-# or to change existing memory mappings to become executable are prohibited.
-MemoryDenyWriteExecute=true
-
 # Explicit module loading will be denied. This allows to turn off module load and unload
 # operations on modular kernels. It is recommended to turn this on for most services that
 # do not need special file systems or extra kernel modules to work.