Mads Toftum wrote: > On Wed, Feb 13, 2008 at 02:04:57PM -0800, Sriram Natarajan wrote: > >> Suhosin is delivered as a separate 'extension' and is not patched within >> the php core. To enable 'suhosin' within PHP, customers using Web Stack >> within Open Solaris Developer Express 01/08 or Open Solaris Developer >> Preview 2 will need to enable this extension by uncommenting >> '/etc/php5/5.2.4/conf.d/suhosin.ini' >> >> > Going by http://www.hardened-php.net/suhosin/ there is indeed a patch > that applies to php - or are you just planning to skip that part and > only use the extension? (iirc, previously there was no way around the > patch to php). > > If I am not mistaken, 'suhosin' extension can be installed either as a 'patch' to the php core or as an extension. Currently, we are not patching the php core but rather providing 'suhosin' as an "optional" but bundled extension. This extension is not enabled by default. Please note that most of the features of 'suhosin' can be installed as an extension
Hth Sriram -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.opensolaris.org/pipermail/webstack-discuss/attachments/20080213/9a0b7875/attachment.html>
