Join the community today
Register Now

Is this an issue?

Discussion in 'Nginx, PHP-FPM & MariaDB MySQL' started by Jon Snow, Nov 22, 2024.

  1. Jon Snow

    Jon Snow Active Member

    815
    164
    43
    Jun 30, 2017
    Ratings:
    +241
    Local Time:
    12:24 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    Code (Text):
    WARNING: 'sysctl' not found! It's required for most checks.
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/memcache.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "yes",
        "fortified": "5",
        "fortify-able": "7"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/timezonedb.so": {
        "relro": "full",
        "canary": "no",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "no",
        "fortified": "0",
        "fortify-able": "0"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/memcached.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "no",
        "fortified": "0",
        "fortify-able": "2"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/redis.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "no",
        "fortified": "0",
        "fortify-able": "5"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/mailparse.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "yes",
        "fortified": "2",
        "fortify-able": "5"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/mcrypt.so": {
        "relro": "partial",
        "canary": "no",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "no",
        "fortified": "0",
        "fortify-able": "3"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/opcache.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "yes",
        "symbols": "no",
        "fortify_source": "yes",
        "fortified": "6",
        "fortify-able": "12"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/geoip.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "no",
        "fortified": "0",
        "fortify-able": "1"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/imagick.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "yes",
        "fortified": "1",
        "fortify-able": "2"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/php/extensions/no-debug-non-zts-20230831/igbinary.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "no",
        "fortify_source": "no",
        "fortified": "0",
        "fortify-able": "1"
      }
    }
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/lib/libpcre.so": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "dso",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "no",
        "symbols": "yes",
        "fortify_source": "yes",
        "fortified": "1",
        "fortify-able": "4"
      }
    }
    ***************************************************
    checksec --format=json --file=/usr/local/sbin/php-fpm --extended | jq -r
    WARNING: 'sysctl' not found! It's required for most checks.
    
    WARNING: Not all necessary commands found. Some tests might not work!
    
    {
      "/usr/local/sbin/php-fpm": {
        "relro": "full",
        "canary": "yes",
        "nx": "yes",
        "pie": "yes",
        "clangcfi": "no",
        "safestack": "no",
        "rpath": "no",
        "runpath": "yes",
        "symbols": "no",
        "fortify_source": "yes",
        "fortified": "15",
        "fortify-able": "34"
      }
    }
    ***************************************************
    Usage: /usr/local/bin/php-config [OPTION]
    Options:
      --prefix            [/usr/local]
      --includes          [-I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib]
      --ldflags           [ -Wl,-z,relro,-z,now -pie -L/usr/lib64/../lib64 -L/usr/local/lib64]
      --libs              [-lcrypt  -lc-client  -ltidy -lncurses -laspell -lpspell -lrt -lldap -llber -lstdc++ -lcrypt -lpam -lgmp -lbz2 -lrt -lm  -lsystemd -lxml2 -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto -lsqlite3 -lz -lcurl -lssl -lcrypto -lxml2 -lenchant -lgmodule-2.0 -lglib-2.0 -lffi -lssl -lcrypto -lz -lpng16 -lwebp -ljpeg -lXpm -lX11 -lfreetype -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto -licuio -licui18n -licuuc -licudata -lonig -lsqlite3 -ledit -lxml2 -lnetsnmp -lm -lm -lssl -lssl -lcrypto -lxml2 -lsodium -largon2 -lxml2 -lxml2 -lxml2 -lxslt -lxml2 -lexslt -lxslt -lxml2 -lzip -lz -lssl -lcrypto -lcrypt ]
      --extension-dir     [/usr/local/lib/php/extensions/no-debug-non-zts-20230831]
      --include-dir       [/usr/local/include/php]
      --man-dir           [/usr/local/php/man]
      --php-binary        [/usr/local/bin/php]
      --php-sapis         [ cli embed fpm phpdbg cgi]
      --ini-path          [/usr/local/lib]
      --ini-dir           [/etc/centminmod/php.d]
      --configure-options [--enable-fpm --enable-opcache --enable-intl --enable-pcntl --with-mcrypt --with-snmp --enable-embed=shared --with-mhash --with-zlib --with-gettext --enable-exif --with-zip --with-libzip --with-bz2 --enable-soap --enable-sockets --enable-sysvmsg --enable-sysvsem --enable-sysvshm --with-mysql-sock=/var/lib/mysql/mysql.sock --with-curl --enable-gd --with-xmlrpc --enable-bcmath --enable-calendar --enable-ftp --enable-gd-native-ttf --with-freetype --with-jpeg --with-png-dir=/usr --with-xpm --with-webp --with-t1lib=/usr --enable-shmop --with-pear --enable-mbstring --with-openssl --with-mysql=mysqlnd --with-libdir=lib64 --with-mysqli=mysqlnd --enable-pdo --with-pdo-sqlite --with-pdo-mysql=mysqlnd --enable-inline-optimization --with-imap --with-imap-ssl --with-kerberos --with-readline --with-libedit --with-gmp --with-pspell --with-tidy --with-enchant --with-fpm-user=nginx --with-fpm-group=nginx --with-ldap --with-ldap-sasl --with-password-argon2 --with-sodium=/usr/local --with-pic --with-config-file-scan-dir=/etc/centminmod/php.d --with-fpm-systemd --with-ffi --with-xsl PKG_CONFIG_PATH=/usr/local/lib64/pkgconfig: PNG_CFLAGS=-I/usr/include PNG_LIBS=-L/usr/lib64 -lpng16 ICU_CFLAGS=-fPIC ICU_LIBS=-L/usr/lib64 -licuio -licui18n -licuuc -licudata ONIG_CFLAGS=-I/usr/include ONIG_LIBS=-L/usr/lib64 -lonig LIBSODIUM_CFLAGS=-fPIC LIBSODIUM_LIBS=-L/usr/local/lib64 -lsodium ARGON2_CFLAGS=-I/usr/local/include ARGON2_LIBS=-L/usr/local/lib64 -largon2 LIBZIP_CFLAGS=-fPIC LIBZIP_LIBS=-L/usr/local/lib64 -lzip]
      --version           [8.3.14]
      --vernum            [80314]
    ***************************************************
    PHP 8.3.14 (cli) (built: Nov 21 2024 23:40:31) (NTS)
    Copyright (c) The PHP Group
    Zend Engine v4.3.14, Copyright (c) Zend Technologies
        with Zend OPcache v8.3.14, Copyright (c), by Zend Technologies
    



    Happened on a new AlmaLinux 9 CMM server when changing PHP versions.
     
  2. eva2000

    eva2000 Administrator Staff Member

    54,126
    12,179
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,739
    Local Time:
    2:24 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    who's the web host? and server plan/specs ?
     
  3. eva2000

    eva2000 Administrator Staff Member

    54,126
    12,179
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,739
    Local Time:
    2:24 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    FYI can be ignored just incorrectly displayed warning from checksec command. Latest 140.00beta01 update has silenced them.
     
  4. Jon Snow

    Jon Snow Active Member

    815
    164
    43
    Jun 30, 2017
    Ratings:
    +241
    Local Time:
    12:24 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    Hetzner Cloud CPx21

    3 vCPU
    4 GB RAM
    80 GB NVMe
     
  5. Jon Snow

    Jon Snow Active Member

    815
    164
    43
    Jun 30, 2017
    Ratings:
    +241
    Local Time:
    12:24 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    I've been using 131.00stable btw.