From: Frank Brehm Date: Tue, 4 Aug 2020 11:51:57 +0000 (+0200) Subject: committing changes in /etc made by "apt dist-upgrade -y" X-Git-Url: https://git.uhu-banane.net/?a=commitdiff_plain;h=63bf44a4e68f27e12cb457a085f2273f9b83a786;p=config%2Fsarah%2Fetc.git committing changes in /etc made by "apt dist-upgrade -y" Package changes: -base-files 10.3+deb10u4 amd64 +base-files 10.3+deb10u5 amd64 -clamav-base 0.102.3+dfsg-0+deb10u1 all -clamav-daemon 0.102.3+dfsg-0+deb10u1 amd64 -clamav-freshclam 0.102.3+dfsg-0+deb10u1 amd64 +clamav-base 0.102.4+dfsg-0+deb10u1 all +clamav-daemon 0.102.4+dfsg-0+deb10u1 amd64 +clamav-freshclam 0.102.4+dfsg-0+deb10u1 amd64 -dbus 1.12.16-1 amd64 +dbus 1.12.20-0+deb10u1 amd64 -grub-common 2.02+dfsg1-20 amd64 -grub-pc 2.02+dfsg1-20 amd64 -grub-pc-bin 2.02+dfsg1-20 amd64 -grub2-common 2.02+dfsg1-20 amd64 +grub-common 2.02+dfsg1-20+deb10u2 amd64 +grub-pc 2.02+dfsg1-20+deb10u2 amd64 +grub-pc-bin 2.02+dfsg1-20+deb10u2 amd64 +grub2-common 2.02+dfsg1-20+deb10u2 amd64 -libapache2-mod-php7.3 7.3.14-1~deb10u1 amd64 +libapache2-mod-php7.3 7.3.19-1~deb10u1 amd64 -libclamav9 0.102.3+dfsg-0+deb10u1 amd64 +libclamav9 0.102.4+dfsg-0+deb10u1 amd64 -libdbus-1-3 1.12.16-1 amd64 +libdbus-1-3 1.12.20-0+deb10u1 amd64 -libgnutls-openssl27 3.6.7-4+deb10u4 amd64 -libgnutls30 3.6.7-4+deb10u4 amd64 +libgnutls-openssl27 3.6.7-4+deb10u5 amd64 +libgnutls30 3.6.7-4+deb10u5 amd64 -libmailutils5 1:3.5-3 amd64 -libmariadb3 1:10.3.22-0+deb10u1 amd64 +libmailutils5 1:3.5-4 amd64 +libmariadb3 1:10.3.23-0+deb10u1 amd64 -libnginx-mod-http-auth-pam 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-dav-ext 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-echo 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-geoip 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-image-filter 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-subs-filter 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-upstream-fair 1.14.2-2+deb10u1 amd64 -libnginx-mod-http-xslt-filter 1.14.2-2+deb10u1 amd64 -libnginx-mod-mail 1.14.2-2+deb10u1 amd64 -libnginx-mod-stream 1.14.2-2+deb10u1 amd64 +libnginx-mod-http-auth-pam 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-dav-ext 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-echo 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-geoip 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-image-filter 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-subs-filter 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-upstream-fair 1.14.2-2+deb10u2 amd64 +libnginx-mod-http-xslt-filter 1.14.2-2+deb10u2 amd64 +libnginx-mod-mail 1.14.2-2+deb10u2 amd64 +libnginx-mod-stream 1.14.2-2+deb10u2 amd64 -libnss3 2:3.42.1-1+deb10u2 amd64 -libntlm0 1.5-1 amd64 +libnss3 2:3.42.1-1+deb10u3 amd64 +libntlm0 1.5-1+deb10u1 amd64 -libperl5.28 5.28.1-6 amd64 +libperl5.28 5.28.1-6+deb10u1 amd64 -libpython3.7-minimal 3.7.3-2+deb10u1 amd64 -libpython3.7-stdlib 3.7.3-2+deb10u1 amd64 +libpython3.7-minimal 3.7.3-2+deb10u2 amd64 +libpython3.7-stdlib 3.7.3-2+deb10u2 amd64 -libruby2.5 2.5.5-3+deb10u1 amd64 +libruby2.5 2.5.5-3+deb10u2 amd64 -libunwind8 1.2.1-9 amd64 +libunwind8 1.2.1-10~deb10u1 amd64 +linux-image-4.19.0-10-amd64 4.19.132-1 amd64 -linux-image-amd64 4.19+105+deb10u4 amd64 -linux-libc-dev 4.19.118-2+deb10u1 amd64 +linux-image-amd64 4.19+105+deb10u5 amd64 +linux-libc-dev 4.19.132-1 amd64 -mailutils 1:3.5-3 amd64 -mailutils-common 1:3.5-3 all +mailutils 1:3.5-4 amd64 +mailutils-common 1:3.5-4 all -mariadb-client 1:10.3.22-0+deb10u1 all +mariadb-client 1:10.3.23-0+deb10u1 all -mariadb-client-10.3 1:10.3.22-0+deb10u1 amd64 -mariadb-client-core-10.3 1:10.3.22-0+deb10u1 amd64 -mariadb-common 1:10.3.22-0+deb10u1 all -mariadb-server 1:10.3.22-0+deb10u1 all +mariadb-client-10.3 1:10.3.23-0+deb10u1 amd64 +mariadb-client-core-10.3 1:10.3.23-0+deb10u1 amd64 +mariadb-common 1:10.3.23-0+deb10u1 all +mariadb-server 1:10.3.23-0+deb10u1 all -mariadb-server-10.3 1:10.3.22-0+deb10u1 amd64 -mariadb-server-core-10.3 1:10.3.22-0+deb10u1 amd64 +mariadb-server-10.3 1:10.3.23-0+deb10u1 amd64 +mariadb-server-core-10.3 1:10.3.23-0+deb10u1 amd64 -nginx-common 1.14.2-2+deb10u1 all -nginx-full 1.14.2-2+deb10u1 amd64 +nginx-common 1.14.2-2+deb10u2 all +nginx-full 1.14.2-2+deb10u2 amd64 -perl 5.28.1-6 amd64 -perl-base 5.28.1-6 amd64 +perl 5.28.1-6+deb10u1 amd64 +perl-base 5.28.1-6+deb10u1 amd64 -perl-modules-5.28 5.28.1-6 all +perl-modules-5.28 5.28.1-6+deb10u1 all -php-twig 2.12.5-1~bpo10+1 all +php-twig 2.13.0-1~bpo10+1 all -php7.3 7.3.14-1~deb10u1 all -php7.3-cli 7.3.14-1~deb10u1 amd64 -php7.3-common 7.3.14-1~deb10u1 amd64 -php7.3-fpm 7.3.14-1~deb10u1 amd64 -php7.3-json 7.3.14-1~deb10u1 amd64 -php7.3-mbstring 7.3.14-1~deb10u1 amd64 -php7.3-mysql 7.3.14-1~deb10u1 amd64 -php7.3-opcache 7.3.14-1~deb10u1 amd64 -php7.3-readline 7.3.14-1~deb10u1 amd64 -php7.3-xml 7.3.14-1~deb10u1 amd64 +php7.3 7.3.19-1~deb10u1 all +php7.3-cli 7.3.19-1~deb10u1 amd64 +php7.3-common 7.3.19-1~deb10u1 amd64 +php7.3-fpm 7.3.19-1~deb10u1 amd64 +php7.3-json 7.3.19-1~deb10u1 amd64 +php7.3-mbstring 7.3.19-1~deb10u1 amd64 +php7.3-mysql 7.3.19-1~deb10u1 amd64 +php7.3-opcache 7.3.19-1~deb10u1 amd64 +php7.3-readline 7.3.19-1~deb10u1 amd64 +php7.3-xml 7.3.19-1~deb10u1 amd64 -postfix 3.4.10-0+deb10u1 amd64 -postfix-mysql 3.4.10-0+deb10u1 amd64 -postfix-pcre 3.4.10-0+deb10u1 amd64 -postfix-sqlite 3.4.10-0+deb10u1 amd64 +postfix 3.4.14-0+deb10u1 amd64 +postfix-mysql 3.4.14-0+deb10u1 amd64 +postfix-pcre 3.4.14-0+deb10u1 amd64 +postfix-sqlite 3.4.14-0+deb10u1 amd64 -python3.7 3.7.3-2+deb10u1 amd64 -python3.7-minimal 3.7.3-2+deb10u1 amd64 +python3.7 3.7.3-2+deb10u2 amd64 +python3.7-minimal 3.7.3-2+deb10u2 amd64 -ruby2.5 2.5.5-3+deb10u1 amd64 +ruby2.5 2.5.5-3+deb10u2 amd64 --- diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels index 25666c7..6ca2d44 100644 --- a/apt/apt.conf.d/01autoremove-kernels +++ b/apt/apt.conf.d/01autoremove-kernels @@ -1,62 +1,65 @@ // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal APT::NeverAutoRemove { - "^linux-image-4\.19\.0-8-amd64$"; + "^linux-image-4\.19\.0-10-amd64$"; "^linux-image-4\.19\.0-9-amd64$"; - "^linux-headers-4\.19\.0-8-amd64$"; + "^linux-headers-4\.19\.0-10-amd64$"; "^linux-headers-4\.19\.0-9-amd64$"; - "^linux-image-extra-4\.19\.0-8-amd64$"; + "^linux-image-extra-4\.19\.0-10-amd64$"; "^linux-image-extra-4\.19\.0-9-amd64$"; - "^linux-modules-4\.19\.0-8-amd64$"; + "^linux-modules-4\.19\.0-10-amd64$"; "^linux-modules-4\.19\.0-9-amd64$"; - "^linux-modules-extra-4\.19\.0-8-amd64$"; + "^linux-modules-extra-4\.19\.0-10-amd64$"; "^linux-modules-extra-4\.19\.0-9-amd64$"; - "^linux-signed-image-4\.19\.0-8-amd64$"; + "^linux-signed-image-4\.19\.0-10-amd64$"; "^linux-signed-image-4\.19\.0-9-amd64$"; - "^linux-image-unsigned-4\.19\.0-8-amd64$"; + "^linux-image-unsigned-4\.19\.0-10-amd64$"; "^linux-image-unsigned-4\.19\.0-9-amd64$"; - "^kfreebsd-image-4\.19\.0-8-amd64$"; + "^kfreebsd-image-4\.19\.0-10-amd64$"; "^kfreebsd-image-4\.19\.0-9-amd64$"; - "^kfreebsd-headers-4\.19\.0-8-amd64$"; + "^kfreebsd-headers-4\.19\.0-10-amd64$"; "^kfreebsd-headers-4\.19\.0-9-amd64$"; - "^gnumach-image-4\.19\.0-8-amd64$"; + "^gnumach-image-4\.19\.0-10-amd64$"; "^gnumach-image-4\.19\.0-9-amd64$"; - "^.*-modules-4\.19\.0-8-amd64$"; + "^.*-modules-4\.19\.0-10-amd64$"; "^.*-modules-4\.19\.0-9-amd64$"; - "^.*-kernel-4\.19\.0-8-amd64$"; + "^.*-kernel-4\.19\.0-10-amd64$"; "^.*-kernel-4\.19\.0-9-amd64$"; - "^linux-backports-modules-.*-4\.19\.0-8-amd64$"; + "^linux-backports-modules-.*-4\.19\.0-10-amd64$"; "^linux-backports-modules-.*-4\.19\.0-9-amd64$"; - "^linux-modules-.*-4\.19\.0-8-amd64$"; + "^linux-modules-.*-4\.19\.0-10-amd64$"; "^linux-modules-.*-4\.19\.0-9-amd64$"; - "^linux-tools-4\.19\.0-8-amd64$"; + "^linux-tools-4\.19\.0-10-amd64$"; "^linux-tools-4\.19\.0-9-amd64$"; - "^linux-cloud-tools-4\.19\.0-8-amd64$"; + "^linux-cloud-tools-4\.19\.0-10-amd64$"; "^linux-cloud-tools-4\.19\.0-9-amd64$"; - "^linux-buildinfo-4\.19\.0-8-amd64$"; + "^linux-buildinfo-4\.19\.0-10-amd64$"; "^linux-buildinfo-4\.19\.0-9-amd64$"; - "^linux-source-4\.19\.0-8-amd64$"; + "^linux-source-4\.19\.0-10-amd64$"; "^linux-source-4\.19\.0-9-amd64$"; }; /* Debug information: # dpkg list: +iF linux-image-4.19.0-10-amd64 4.19.132-1 amd64 Linux 4.19 for 64-bit PCs (signed) ii linux-image-4.19.0-8-amd64 4.19.98-1+deb10u1 amd64 Linux 4.19 for 64-bit PCs (signed) -iF linux-image-4.19.0-9-amd64 4.19.118-2+deb10u1 amd64 Linux 4.19 for 64-bit PCs (signed) -ii linux-image-amd64 4.19+105+deb10u4 amd64 Linux for 64-bit PCs (meta-package) +ii linux-image-4.19.0-9-amd64 4.19.118-2+deb10u1 amd64 Linux 4.19 for 64-bit PCs (signed) +iU linux-image-amd64 4.19+105+deb10u5 amd64 Linux for 64-bit PCs (meta-package) # list of installed kernel packages: +4.19.0-10-amd64 4.19.132-1 4.19.0-8-amd64 4.19.98-1+deb10u1 4.19.0-9-amd64 4.19.118-2+deb10u1 # list of different kernel versions: +4.19.132-1 4.19.118-2+deb10u1 4.19.98-1+deb10u1 -# Installing kernel: 4.19.118-2+deb10u1 (4.19.0-9-amd64) +# Installing kernel: 4.19.132-1 (4.19.0-10-amd64) # Running kernel: 4.19.118-2+deb10u1 (4.19.0-9-amd64) -# Last kernel: 4.19.118-2+deb10u1 -# Previous kernel: 4.19.98-1+deb10u1 +# Last kernel: 4.19.132-1 +# Previous kernel: 4.19.118-2+deb10u1 # Kernel versions list to keep: 4.19.118-2+deb10u1 -4.19.98-1+deb10u1 +4.19.132-1 # Kernel packages (version part) to protect: -4\.19\.0-8-amd64 +4\.19\.0-10-amd64 4\.19\.0-9-amd64 */ diff --git a/debian_version b/debian_version index 1be519c..9a62de2 100644 --- a/debian_version +++ b/debian_version @@ -1 +1 @@ -10.4 +10.5 diff --git a/motd b/motd index b324105..75f29bf 100644 --- a/motd +++ b/motd @@ -6,11 +6,13 @@ Debian GNU/Linux 10 (buster) |____/ \__,_|_| \__,_|_| |_| -Affekte sind Erregungen, infolge deren die Menschen ihre Stimmung -ändern und verschiedenartig urteilen, Erregungen, die mit Lust- und -Unlustgefühlen verbunden sind, wie Zorn, Mitleid, Furcht und andere -der Art sowie ihre Gegensätze. - -- Aristoteles (Psychologie, 384-322 v. Chr.) +Frauen sind unweigerlich die Verlierer, wenn sie auf absoluter +"Gleichheit" mit dem Manne bestehen. Was sie sind und was sie vermögen, +macht sie dem Mann überlegen, und die richtige Taktik wäre es, auf Grund +dieser Tatsache so viele Sonderrechte wie möglich zu erpressen. Mit +"Gleichheit" sollten sie sich nicht zufrieden geben. "Gleichheit" +bedeutet für Frauen eine Katastrophe. + -- Robert Anson Heinlein (Die Leben des Lazarus Long) Today is Sweetmorn, the 70th day of Confusion in the YOLD 3186 diff --git a/php/7.3/apache2/php.ini b/php/7.3/apache2/php.ini index aedc473..1af6007 100644 --- a/php/7.3/apache2/php.ini +++ b/php/7.3/apache2/php.ini @@ -1415,7 +1415,8 @@ session.cookie_domain = session.cookie_httponly = ; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF) -; Current valid values are "Lax" or "Strict" +; Current valid values are "Strict", "Lax" or "None". When using "None", +; make sure to include the quotes, as `none` is interpreted like `false` in ini files. ; https://tools.ietf.org/html/draft-west-first-party-cookies-07 session.cookie_samesite = @@ -1423,12 +1424,9 @@ session.cookie_samesite = ; http://php.net/session.serialize-handler session.serialize_handler = php -; Defines the probability that the 'garbage collection' process is started -; on every session initialization. The probability is calculated by using -; gc_probability/gc_divisor. Where session.gc_probability is the numerator -; and gc_divisor is the denominator in the equation. Setting this value to 1 -; when the session.gc_divisor value is 100 will give you approximately a 1% chance -; the gc will run on any given request. +; Defines the probability that the 'garbage collection' process is started on every +; session initialization. The probability is calculated by using gc_probability/gc_divisor, +; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. ; Default Value: 1 ; Development Value: 1 ; Production Value: 1 @@ -1436,13 +1434,9 @@ session.serialize_handler = php session.gc_probability = 0 ; Defines the probability that the 'garbage collection' process is started on every -; session initialization. The probability is calculated by using the following equation: -; gc_probability/gc_divisor. Where session.gc_probability is the numerator and -; session.gc_divisor is the denominator in the equation. Setting this value to 100 -; when the session.gc_probability value is 1 will give you approximately a 1% chance -; the gc will run on any given request. Increasing this value to 1000 will give you -; a 0.1% chance the gc will run on any given request. For high volume production servers, -; this is a more efficient approach. +; session initialization. The probability is calculated by using gc_probability/gc_divisor, +; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. +; For high volume production servers, using a value of 1000 is a more efficient approach. ; Default Value: 100 ; Development Value: 1000 ; Production Value: 1000 @@ -1458,8 +1452,8 @@ session.gc_maxlifetime = 1440 ; (see session.save_path above), then garbage collection does *not* ; happen automatically. You will need to do your own garbage ; collection through a shell script, cron entry, or some other method. -; For example, the following script would is the equivalent of -; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): +; For example, the following script is the equivalent of setting +; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): ; find /path/to/sessions -cmin +24 -type f | xargs rm ; Check HTTP Referer to invalidate externally stored URLs containing ids. diff --git a/php/7.3/cli/php.ini b/php/7.3/cli/php.ini index d9c24a8..080d044 100644 --- a/php/7.3/cli/php.ini +++ b/php/7.3/cli/php.ini @@ -1415,7 +1415,8 @@ session.cookie_domain = session.cookie_httponly = ; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF) -; Current valid values are "Lax" or "Strict" +; Current valid values are "Strict", "Lax" or "None". When using "None", +; make sure to include the quotes, as `none` is interpreted like `false` in ini files. ; https://tools.ietf.org/html/draft-west-first-party-cookies-07 session.cookie_samesite = @@ -1423,12 +1424,9 @@ session.cookie_samesite = ; http://php.net/session.serialize-handler session.serialize_handler = php -; Defines the probability that the 'garbage collection' process is started -; on every session initialization. The probability is calculated by using -; gc_probability/gc_divisor. Where session.gc_probability is the numerator -; and gc_divisor is the denominator in the equation. Setting this value to 1 -; when the session.gc_divisor value is 100 will give you approximately a 1% chance -; the gc will run on any given request. +; Defines the probability that the 'garbage collection' process is started on every +; session initialization. The probability is calculated by using gc_probability/gc_divisor, +; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. ; Default Value: 1 ; Development Value: 1 ; Production Value: 1 @@ -1436,13 +1434,9 @@ session.serialize_handler = php session.gc_probability = 0 ; Defines the probability that the 'garbage collection' process is started on every -; session initialization. The probability is calculated by using the following equation: -; gc_probability/gc_divisor. Where session.gc_probability is the numerator and -; session.gc_divisor is the denominator in the equation. Setting this value to 100 -; when the session.gc_probability value is 1 will give you approximately a 1% chance -; the gc will run on any given request. Increasing this value to 1000 will give you -; a 0.1% chance the gc will run on any given request. For high volume production servers, -; this is a more efficient approach. +; session initialization. The probability is calculated by using gc_probability/gc_divisor, +; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. +; For high volume production servers, using a value of 1000 is a more efficient approach. ; Default Value: 100 ; Development Value: 1000 ; Production Value: 1000 @@ -1458,8 +1452,8 @@ session.gc_maxlifetime = 1440 ; (see session.save_path above), then garbage collection does *not* ; happen automatically. You will need to do your own garbage ; collection through a shell script, cron entry, or some other method. -; For example, the following script would is the equivalent of -; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): +; For example, the following script is the equivalent of setting +; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): ; find /path/to/sessions -cmin +24 -type f | xargs rm ; Check HTTP Referer to invalidate externally stored URLs containing ids. diff --git a/php/7.3/fpm/php.ini b/php/7.3/fpm/php.ini index aedc473..1af6007 100644 --- a/php/7.3/fpm/php.ini +++ b/php/7.3/fpm/php.ini @@ -1415,7 +1415,8 @@ session.cookie_domain = session.cookie_httponly = ; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF) -; Current valid values are "Lax" or "Strict" +; Current valid values are "Strict", "Lax" or "None". When using "None", +; make sure to include the quotes, as `none` is interpreted like `false` in ini files. ; https://tools.ietf.org/html/draft-west-first-party-cookies-07 session.cookie_samesite = @@ -1423,12 +1424,9 @@ session.cookie_samesite = ; http://php.net/session.serialize-handler session.serialize_handler = php -; Defines the probability that the 'garbage collection' process is started -; on every session initialization. The probability is calculated by using -; gc_probability/gc_divisor. Where session.gc_probability is the numerator -; and gc_divisor is the denominator in the equation. Setting this value to 1 -; when the session.gc_divisor value is 100 will give you approximately a 1% chance -; the gc will run on any given request. +; Defines the probability that the 'garbage collection' process is started on every +; session initialization. The probability is calculated by using gc_probability/gc_divisor, +; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. ; Default Value: 1 ; Development Value: 1 ; Production Value: 1 @@ -1436,13 +1434,9 @@ session.serialize_handler = php session.gc_probability = 0 ; Defines the probability that the 'garbage collection' process is started on every -; session initialization. The probability is calculated by using the following equation: -; gc_probability/gc_divisor. Where session.gc_probability is the numerator and -; session.gc_divisor is the denominator in the equation. Setting this value to 100 -; when the session.gc_probability value is 1 will give you approximately a 1% chance -; the gc will run on any given request. Increasing this value to 1000 will give you -; a 0.1% chance the gc will run on any given request. For high volume production servers, -; this is a more efficient approach. +; session initialization. The probability is calculated by using gc_probability/gc_divisor, +; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. +; For high volume production servers, using a value of 1000 is a more efficient approach. ; Default Value: 100 ; Development Value: 1000 ; Production Value: 1000 @@ -1458,8 +1452,8 @@ session.gc_maxlifetime = 1440 ; (see session.save_path above), then garbage collection does *not* ; happen automatically. You will need to do your own garbage ; collection through a shell script, cron entry, or some other method. -; For example, the following script would is the equivalent of -; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): +; For example, the following script is the equivalent of setting +; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): ; find /path/to/sessions -cmin +24 -type f | xargs rm ; Check HTTP Referer to invalidate externally stored URLs containing ids.