PHP with open_basedir performance problem

[Stanislav Sedov]

On Mon, Jan 28, 2008 at 03:23:52PM +0100 Miroslav Lachman mentioned:
> 
> Does somebody have any other ideas?
> 

I'd suggest you to disable open_basedir at all or roll out specialized
implementation. I had a lot of similar problems with open_basedir in
the past, so I just rewrote it to match our specific security policy.

Most basedir problems are linked with the fact it produce a lot of lstast/
readlinks on every require, include or open command. On Linux it pereforms
even worse, as they implemented readlink there by hand, and, of course,
their implementation isn't particulry good.

I don't thinks this problem could be solved with PHP guys, taking in account
the fact that a simple bug report with the patch usually result in two weeks
of formal replies like "it's not a bug, it's a feature". Not speaking about
they desicover new bugs in basedir every couple of days.

-- 
Stanislav Sedov
ST4096-RIPE