[arch-dev-public] moving php-suhopsin to [extra]
Hi all, I am about to move the new php package to testing soon. (I will talk about this later) I would like to move the suhosin extension, which I currently maintain in [community], to [extra]. Everybody who wants to use php on a server should use this extension. Moving this to [extra] should underline this security aspect. What do you think about this? Any complaints? :-) Pierre -- archlinux.de
2007/9/24, Pierre Schmitz <pierre@archlinux.de>:
Hi all,
I am about to move the new php package to testing soon. (I will talk about this later)
I would like to move the suhosin extension, which I currently maintain in [community], to [extra]. Everybody who wants to use php on a server should use this extension. Moving this to [extra] should underline this security aspect.
What do you think about this? Any complaints? :-)
No complaints here. -- Roman Kyrylych (Роман Кирилич)
Monday 24 September 2007, Pierre Schmitz wrote: | I would like to move the suhosin extension, which I currently | maintain in [community], to [extra]. Everybody who wants to use | php on a server should use this extension. Moving this to [extra] | should underline this security aspect. is this extension per default enabled in our php? does it break anything? needs announcement + backgroud info pointers - D -- .·´¯`·.¸.·´¯`·.¸¸.·´¯`·.¸.·´¯`·.¸.·´¯`·.¸.·´¯`·.¸¸.·´ ° ° ° ° ° ° ><((((º> ° ° ° ° ° <º)))>< <º)))><
Am Dienstag, 25. September 2007 12:00:52 schrieb Damir Perisa:
is this extension per default enabled in our php?
No, it is not. My policy about this is: When installing any external php extension put its config file into /etc/php/conf.d and disable it by default.
does it break anything?
It's a configurable extension so it depends on the user if something breaks. See http://www.hardened-php.net/suhosin/configuration.html
needs announcement + backgroud info pointers
Of course I will write an announcement about this. -- archlinux.de
Tuesday 25 September 2007, Pierre Schmitz wrote: | Am Dienstag, 25. September 2007 12:00:52 schrieb Damir Perisa: | > is this extension per default enabled in our php? | | No, it is not. My policy about this is: When installing any | external php extension put its config file into /etc/php/conf.d | and disable it by default. | | > does it break anything? | | It's a configurable extension so it depends on the user if | something breaks. See | http://www.hardened-php.net/suhosin/configuration.html | | > needs announcement + backgroud info pointers | | Of course I will write an announcement about this. green light then! - D -- .·´¯`·.¸.·´¯`·.¸¸.·´¯`·.¸.·´¯`·.¸.·´¯`·.¸.·´¯`·.¸¸.·´ ° ° ° ° ° ° ><((((º> ° ° ° ° ° <º)))>< <º)))><
On 9/25/07, Damir Perisa <damir.perisa@solnet.ch> wrote:
Tuesday 25 September 2007, Pierre Schmitz wrote: | Am Dienstag, 25. September 2007 12:00:52 schrieb Damir Perisa: | > is this extension per default enabled in our php? | | No, it is not. My policy about this is: When installing any | external php extension put its config file into /etc/php/conf.d | and disable it by default. | | > does it break anything? | | It's a configurable extension so it depends on the user if | something breaks. See | http://www.hardened-php.net/suhosin/configuration.html | | > needs announcement + backgroud info pointers | | Of course I will write an announcement about this.
green light then!
Agreed. Thanks for this, our PHP needed some loving 8)
participants (4)
-
Aaron Griffin
-
Damir Perisa
-
Pierre Schmitz
-
Roman Kyrylych