2007/9/24, Pierre Schmitz :

Hi all,

I am about to move the new php package to testing soon. (I will talk about this later)

I would like to move the suhosin extension, which I currently maintain in [community], to [extra]. Everybody who wants to use php on a server should use this extension. Moving this to [extra] should underline this security aspect.

What do you think about this? Any complaints? :-)

No complaints here. -- Roman Kyrylych (Роман Кирилич)

Am Dienstag, 25. September 2007 12:00:52 schrieb Damir Perisa:

is this extension per default enabled in our php?

No, it is not. My policy about this is: When installing any external php extension put its config file into /etc/php/conf.d and disable it by default.

does it break anything?

It's a configurable extension so it depends on the user if something breaks. See http://www.hardened-php.net/suhosin/configuration.html

needs announcement + backgroud info pointers

Of course I will write an announcement about this. -- archlinux.de

On 9/25/07, Damir Perisa wrote:

Tuesday 25 September 2007, Pierre Schmitz wrote: | Am Dienstag, 25. September 2007 12:00:52 schrieb Damir Perisa: | > is this extension per default enabled in our php? | | No, it is not. My policy about this is: When installing any | external php extension put its config file into /etc/php/conf.d | and disable it by default. | | > does it break anything? | | It's a configurable extension so it depends on the user if | something breaks. See | http://www.hardened-php.net/suhosin/configuration.html | | > needs announcement + backgroud info pointers | | Of course I will write an announcement about this.

green light then!

Agreed. Thanks for this, our PHP needed some loving 8)