An Auditor’s Checklist for Securing Magento 2 Backends on DigitalOcean
DigitalOcean Droplet Hardening for Magento 2
Securing a Magento 2 instance on DigitalOcean begins with a robustly hardened Droplet. This involves minimizing the attack surface, configuring firewalls, and ensuring secure access protocols.
1. SSH Access Control
Disable root login and password-based authentication. Enforce key-based authentication and consider restricting SSH access to specific IP addresses or ranges.
1.1. Disable Root SSH Login
Edit the SSH daemon configuration file:
sudo nano /etc/ssh/sshd_config
Locate or add the following lines and ensure they are set as shown:
PermitRootLogin no PasswordAuthentication no
After saving the changes, restart the SSH service:
sudo systemctl restart sshd
Crucially, ensure you have successfully logged in with your non-root user using SSH keys *before* disabling password authentication and root login.
1.2. Restrict SSH Access by IP (Optional but Recommended)
Use the `AllowUsers` or `AllowGroups` directives in /etc/ssh/sshd_config, or implement IP-based restrictions using iptables or ufw. For ufw, assuming your SSH port is 22:
sudo ufw allow from YOUR_ADMIN_IP to any port 22 proto tcp sudo ufw allow from ANOTHER_ADMIN_IP to any port 22 proto tcp sudo ufw deny 22/tcp # Deny all other SSH access
Then, ensure UFW is enabled and configured to allow essential ports (e.g., 80, 443, your Magento application ports).
2. Firewall Configuration (UFW)
A properly configured firewall is paramount. We’ll use ufw (Uncomplicated Firewall) for its simplicity and effectiveness on Ubuntu-based DigitalOcean images.
2.1. Default Policies
Set default policies to deny incoming traffic and allow outgoing traffic. This is a secure baseline.
sudo ufw default deny incoming sudo ufw default allow outgoing
2.2. Allow Essential Ports
Allow traffic for HTTP, HTTPS, SSH (if not restricted by IP above), and potentially other services your Magento setup requires (e.g., Redis, Elasticsearch). Adjust ports as necessary if you’ve customized them.
sudo ufw allow http # Port 80 sudo ufw allow https # Port 443 sudo ufw allow ssh # Port 22 (or your custom SSH port) # Example for Redis (if running on the same Droplet) # sudo ufw allow 6379/tcp # Example for Elasticsearch (if running on the same Droplet) # sudo ufw allow 9200/tcp # sudo ufw allow 9300/tcp
2.3. Enable UFW
Enable the firewall. You will be prompted to confirm, as this might disrupt existing connections.
sudo ufw enable
Verify the status:
sudo ufw status verbose
3. Web Server Configuration (Nginx Example)
Secure your web server by disabling unnecessary modules, enforcing TLS/SSL, and implementing security headers. This example uses Nginx, common for Magento 2 deployments.
3.1. TLS/SSL Configuration
Ensure all traffic is served over HTTPS. Use strong ciphers and protocols. Obtain certificates via Let’s Encrypt or a trusted CA.
server {
listen 80;
server_name yourdomain.com www.yourdomain.com;
return 301 https://$host$request_uri; # Redirect HTTP to HTTPS
}
server {
listen 443 ssl http2;
server_name yourdomain.com www.yourdomain.com;
ssl_certificate /etc/letsencrypt/live/yourdomain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/yourdomain.com/privkey.pem;
# Modern TLS configuration (example, consult current best practices)
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_session_tickets off;
# HSTS (HTTP Strict Transport Security)
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
# Other security headers
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
# add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'none'; style-src 'self' 'unsafe-inline';" always; # CSP requires careful tuning for Magento
root /var/www/magento2/public_html; # Adjust to your Magento root
index index.php index.html index.htm;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ ^/index\.php(/|$) {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php8.1-fpm.sock; # Adjust PHP version
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param MAGE_RUN_CODE "your_store_code"; # If using multiple store views
fastcgi_param MAGE_RUN_TYPE "store";
}
# Deny access to sensitive files
location ~* /(composer\.json|composer\.lock|\.env|\.htaccess|LICENSE|README\.md) {
deny all;
return 404;
}
# Deny access to var/ directory contents
location ~ ^/var/log/.*\.log$ {
deny all;
return 404;
}
location ~ ^/var/session/.*$ {
deny all;
return 404;
}
location ~ ^/var/cache/.*$ {
deny all;
return 404;
}
location ~ ^/var/view_preprocessed/.*$ {
deny all;
return 404;
}
location ~ ^/var/generation/.*$ {
deny all;
return 404;
}
location ~ ^/var/page_cache/.*$ {
deny all;
return 404;
}
location ~ ^/var/import_export/.*$ {
deny all;
return 404;
}
location ~ ^/var/export/.*$ {
deny all;
return 404;
}
location ~ ^/var/tmp/.*$ {
deny all;
return 404;
}
location ~ ^/var/backups/.*$ {
deny all;
return 404;
}
# Deny access to media/upload files if not needed directly
# location ~ ^/media/upload/.*$ {
# deny all;
# return 404;
# }
# Magento static content configuration (adjust if using CDN)
location ~ ^/static/ {
expires 1y;
add_header Cache-Control "public";
autoindex off;
}
# Magento media content configuration (adjust if using CDN)
location ~ ^/media/ {
expires 1y;
add_header Cache-Control "public";
autoindex off;
}
# Magento pub/static/frontend/ or pub/static/adminhtml/
location ~ ^/(pub/static|static)/ {
# try_files $uri $uri/ /pub/static.php?$args; # If using static.php
expires max;
add_header Cache-Control "public";
}
# Magento pub/media/
location ~ ^/pub/media/ {
expires max;
add_header Cache-Control "public";
}
# Magento robots.txt
location = /robots.txt {
allow all;
}
# Magento favicon.ico
location = /favicon.ico {
allow all;
}
# Magento health check endpoint (if applicable)
# location ~* ^/_health_check {
# access_log off;
# return 200 "OK";
# allow 127.0.0.1;
# deny all;
# }
}
3.2. Disable Unused Modules
Review your Nginx configuration for any loaded modules that are not strictly necessary for your Magento deployment. For example, if you don’t use HTTP/2, you can remove http2 from the listen directive.
4. PHP-FPM Security
PHP-FPM is the engine powering your Magento application. Secure its configuration to prevent vulnerabilities.
4.1. PHP-FPM Configuration
Edit your PHP-FPM pool configuration file (e.g., /etc/php/8.1/fpm/pool.d/www.conf). Adjust the listen directive to use a Unix socket for better performance and security compared to TCP/IP, especially if PHP-FPM is on the same server as Nginx.
; Example for /etc/php/8.1/fpm/pool.d/www.conf user = www-data group = www-data listen = /var/run/php/php8.1-fpm.sock ; Use a Unix socket ; Security settings listen.owner = www-data listen.group = www-data listen.mode = 0660 ; Performance settings (adjust based on server resources and traffic) pm = dynamic pm.max_children = 50 pm.start_servers = 5 pm.min_spare_servers = 2 pm.max_spare_servers = 10 pm.process_idle_timeout = 10s pm.max_requests = 500 ; Disable dangerous functions if not strictly required by Magento extensions ; disable_functions = exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source,pcntl_exec,pcntl_fork,pcntl_wait,pcntl_signal,pcntl_sigprocmask,pcntl_strerror,pcntl_get_errno,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_strerror,pcntl_str