Is proxmox also running php? If .true shouldn't I shutdown regarding the current global php issue?
@ https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
@ https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php
Proxmox products are either build using Perl (Proxmox VE, Proxmox Mail Gateway) or Rust (Proxmox Backup Server, Proxmox Datacenter Manager). So if you are running one of our products, you should not be impacted by php2shell. However, we host several services that do use PHP (such as the Proxmox VE wiki) and are currently mitigating the issue there. This may have an impact on how some sites we host function.
Update: Since the patches fixing this issue have been published we've rolled them out across the services we host. If you notice anything not functioning as expected feel free to comment here.
Update: Since the patches fixing this issue have been published we've rolled them out across the services we host. If you notice anything not functioning as expected feel free to comment here.
Last edited:
I might be late on the ball so to speak, however I found this:
/etc/apparmor.d/abstractions/php
I have no knowledge in why or what - so question is: Part of "Proxmox standard image" or just bad luck I got it?
Background: I just in the last week installed a 3-Cluster Proxmox setup, and well the file I mention above is part of all cluster nodes, and it seems to not be part of any upgrade?
/etc/apparmor.d/abstractions/php
I have no knowledge in why or what - so question is: Part of "Proxmox standard image" or just bad luck I got it?
Background: I just in the last week installed a 3-Cluster Proxmox setup, and well the file I mention above is part of all cluster nodes, and it seems to not be part of any upgrade?
Hey,
However, one aspect I neglected to mention previously, is that of course if you manually installed PHP on the host of a Proxmox product or are hosting it inside a VM or Container, you could still be impacted. In that case you should follow the guidance of the PHP developers.
[1]: https://www.apparmor.net/profiles/profiles-abstractions/
/etc/apparmor.d/abstractions/php is an AppArmor abstraction that can be included in AppArmor profiles [1]. It by itself does not mean that PHP is installed or running on your machine. Proxmox uses AppArmor to improve the security of certain aspects of a system. The most prominent being better isolation of LXC containers from the host in Proxmox VE.However, one aspect I neglected to mention previously, is that of course if you manually installed PHP on the host of a Proxmox product or are hosting it inside a VM or Container, you could still be impacted. In that case you should follow the guidance of the PHP developers.
[1]: https://www.apparmor.net/profiles/profiles-abstractions/
Last edited:
Well, I know for a fact that this is from the _Shell on one of the nodes (it is there for all three, so no difference between them):
As I wrote this is completely new nodes, in a cluster, built the last week. I for sure have not installed apparmor my self so it is part of Proxmox distribution or something. Sorry to say I can not provide anything more since I have no knowledge in how Proxmox is built and what is included. I am just using Proxmox in this aspect.
Code:
root@pveq:/etc/apparmor.d/abstractions# ls -l php
-rw-r--r-- 1 root root 1184 Jul 21 2025 phpAs I wrote this is completely new nodes, in a cluster, built the last week. I for sure have not installed apparmor my self so it is part of Proxmox distribution or something. Sorry to say I can not provide anything more since I have no knowledge in how Proxmox is built and what is included. I am just using Proxmox in this aspect.
Last edited:
Yes as stated above, this is normal. The file does not indicate that you are impacted by php2shell. It is used by AppArmor, not PHP.