PHReeK.oRG

There are a few extra steps necessary to install IonCube with SELinux enabled. Here is what I did:

1. Download the IonCube Loader
2. Extract the tarball and copy the ioncube*.so files to /usr/lib/php/modules

   chown root:root /usr/lib/php/modules/ioncube*.so
   chcon --reference=/usr/sbin/httpd /usr/lib/php/modules/ioncube*.so
   

3. Create a file called /root/httpdlocal.te and insert the following:

   module httpdlocal 1.0;
   
   require {
           type httpd_exec_t;
           type httpd_t;
           class process { execstack execmem };
           class file { execmod };
   }
   
   allow httpd_t httpd_exec_t:file execmod;
   allow httpd_t self:process { execstack execmem };
   

4. Compile the SELinux module and install it

   checkmodule -M -m -o httpdlocal.mod httpdlocal.te
   semodule_package -o httpdlocal.pp -m httpdlocal.mod
   semodule -i httpdlocal.pp
   

5. Create a file /etc/php.d/20ioncube.ini and insert the following:

   zend_extension = /usr/lib/php/modules/ioncube_loader_lin_5.3.so
   

6. Restart Apache

   service httpd restart

You should now have IonCube installed and functional. Create a phpinfo() script and look just below the first block of information for the Zend logo, and inside that box it should mention the IonCube loader.