# HG changeset patch
# User IBBoard <dev@ibboard.co.uk>
# Date 1471092241 -3600
# Node ID b00eb9434938f9817d680ba8ea58033d95af6546
# Parent  95502bafeaa328368ed84a187238aadfa5ba67a7
Disable PCRE JIT to stop SELinux giving "denied execmem" for Apache

This probably hits performance slightly, but at least now we'll
be able to see what happens in audit.log and it won't roll over
every few hours!

diff -r 95502bafeaa3 -r b00eb9434938 modules/website/files/custom-php.ini
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/modules/website/files/custom-php.ini	Sat Aug 13 13:44:01 2016 +0100
@@ -0,0 +1,5 @@
+; Use UTF-8. Because why not?
+default_charset = 'UTF-8'
+
+; Work around SELinux "denied execmem" warnings from preg_match JITing
+pcre.jit = 0
diff -r 95502bafeaa3 -r b00eb9434938 modules/website/manifests/php.pp
--- a/modules/website/manifests/php.pp	Wed Jul 20 20:31:22 2016 +0100
+++ b/modules/website/manifests/php.pp	Sat Aug 13 13:44:01 2016 +0100
@@ -31,7 +31,7 @@
   }
   file { '/etc/php.d/custom-php.ini':
     ensure => present,
-    content => 'default_charset = \'UTF-8\'',
+    source => 'puppet:///modules/website/custom-php.ini',
   }
 
   if $opcache {