Re: Suhosin patch disabled by default in Debian php5 builds
| From: | Stefan Esser | Date: | Fri, 03 Feb 2012 09:41:04 +0000 |
| Subject: | Re: Suhosin patch disabled by default in Debian php5 builds | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57652@lists.php.net to get a copy of this message | ||
Hello Pierre,
> Again, please tell me which part of Suhosin would make sense to have
> in the core? With technical explanation or details. Then we can begin
> a good discussion and maybe a RFC to get them in.
what part of "all of it and I am not going to try to convince you about this" do you not
understand?
I am not interested in pushing Suhosin into PHP mainline. Why in hell would I want that. If Suhosin
gets absorbed by PHP.net then I would have to start a new project, because there are tons of
mitigations I can think up that will be implemented at some point in time and will never make it
into PHP mainline.
With Suhosin existing I am free to implement as many security mitigations I like and do not have to
beg the PHP developers to consider adding something.
Regards,
Stefan