Re: Comments on PHP security
| From: | Alain Williams | Date: | Wed, 17 Jan 2007 12:45:42 +0000 |
| Subject: | Re: Comments on PHP security | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27500@lists.php.net to get a copy of this message | ||
On Wed, Jan 17, 2007 at 01:38:57PM +0100, Arnold Daniels wrote:
> Hi again,
>
> Yes we can share it with the world, but first it should be reviewed by
> others to see if we haven't missed anything which makes the system less
> secure instead of more. Also the source code is currently really dirty
> and specified on our situation (to little to config, mod_diffpriv also
> does mass virtual hosting, etc.).
>
> Please send me an e-mail, if you would like to review it and I'll send
> you the source code. Again, please note that you need to patch your
> kernel for it, so you need to do it on some test server or a virtual
> machine.
The kernel patch is the interesting thing ... for this to fly the kernel developers
will need to be convinced. What does the kernel patch do ?
--
Alain Williams
Linux Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.
+44 (0) 787 668 0256 http://www.phcomp.co.uk/
Parliament Hill Computers Ltd. Registration Information: http://www.phcomp.co.uk/contact.php
#include <std_disclaimer.h>