Package: php-common
Version: 2:96

`phpsessionclean.service` (which runs `/usr/lib/php/sessionclean`) contains `ProtectHome=true`. This is obviously problematic when storing session files in /home/, which is not uncommon. Due to systemd's implementation details (exposing /home/ but simply returning an empty directory listing), this causes session files to not be cleaned up. The cleanup process effectively fails silently.

I therefore urge the package maintainers to re-consider the default ProtectHome behaviour, especially seeing as how I'm unsure why this setting is necessary (protecting against too broad `find -delete`s)?

Met vriendelijke groeten,

William David Edwards

Reply via email to