Move each php session to a private destination

1 files changed, 2 insertions, 0 deletions

diff --git a/virtual/packages/aten.nix b/virtual/packages/aten.nix
index 8251b31..d67f7b7 100644
--- a/virtual/packages/aten.nix
+++ b/virtual/packages/aten.nix
@@ -16,6 +16,7 @@ let
         php_admin_value[post_max_size] = 20M
         ;php_admin_flag[log_errors] = on
         php_admin_value[open_basedir] = "${webappDir}:${varDir}:/tmp"
+        php_admin_value[session.save_path] = "${varDir}/phpSessions"
         ${if environment == "dev" then ''
         pm = ondemand
         pm.max_children = 5
@@ -80,6 +81,7 @@ let
       deps = [ "wrappers" ];
       text = ''
       install -m 0755 -o ${apache.user} -g ${apache.group} -d ${varDir}
+      install -m 0750 -o ${apache.user} -g ${apache.group} -d ${varDir}/phpSessions
       if [ ! -f "${varDir}/currentWebappDir" -o \
           "${webappDir}" != "$(cat ${varDir}/currentWebappDir 2>/dev/null)" ]; then
         pushd ${webappDir} > /dev/null