Date: Wed, 15 Oct 2008 14:47:00 -0500 From: Matt <datahead4@gmail.com> To: "Jeremy Chadwick" <koitsu@freebsd.org> Cc: Alain Wolf <wolf@k18.ch>, freebsd-questions@freebsd.org Subject: Re: [Fwd: Suhosin Segmentation Fault] Message-ID: <cd6b4a5b0810151247j1f2d83bcr2c751f9387d73c46@mail.gmail.com> In-Reply-To: <20081015193541.GA85764@icarus.home.lan> References: <48F62774.2060609@k18.ch> <20081015185509.GB84864@icarus.home.lan> <48F643D1.3020500@infracaninophile.co.uk> <20081015193541.GA85764@icarus.home.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Oct 15, 2008 at 2:35 PM, Jeremy Chadwick <koitsu@freebsd.org> wrote: > On Wed, Oct 15, 2008 at 08:26:09PM +0100, Matthew Seaman wrote: >> Jeremy Chadwick wrote: >> >>> Suhosin is not an extension you load in extensions.ini; it's a patch >>> applied to the core of PHP. >> >> % grep suhosin /usr/local/etc/php/extensions.ini >> extension=suhosin.so >> >> It's both a set of patches to the PHP core, and a loadable module. >> >> Cheers, >> >> Matthew > > Are you sure? Yes - the suhosin extension is located in the ports tree at: /usr/ports/security/php-suhosin Install instructions are at: http://www.hardened-php.net/suhosin/how_to_install_or_upgrade.html#installing_the_extension It's been a while since I've looked at the suhosin options and I can't remember what the differences are between the extension and the core-php patch. Matt > > # find /usr/local/lib/php -name "*suhosin*" -ls > # > > # grep -i suhosin /var/db/ports/php5/options > WITH_SUHOSIN=true > > # grep -i suhosin /usr/local/etc/php/extensions.ini > # > > # pkg_version -v | grep php5 > php5-5.2.6_2 = up-to-date with port > php5-extensions-1.1 = up-to-date with port > php5-mysql-5.2.6_2 = up-to-date with port > php5-pcre-5.2.6_2 = up-to-date with port > php5-simplexml-5.2.6_2 = up-to-date with port > > # grep -i php5 /usr/local/etc/apache22/httpd.conf > LoadModule php5_module libexec/apache22/libphp5.so > > # php -i | grep -i suhosin > This server is protected with the Suhosin Patch 0.9.6.2 > suhosin.log.phpscript => 0 => 0 > suhosin.log.phpscript.is_safe => Off => Off > suhosin.log.phpscript.name => no value => no value > suhosin.log.sapi => no value => no value > suhosin.log.script => no value => no value > suhosin.log.script.name => no value => no value > suhosin.log.syslog => no value => no value > suhosin.log.syslog.facility => no value => no value > suhosin.log.syslog.priority => no value => no value > suhosin.log.use-x-forwarded-for => Off => Off > > :-) > > -- > | Jeremy Chadwick jdc at parodius.com | > | Parodius Networking http://www.parodius.com/ | > | UNIX Systems Administrator Mountain View, CA, USA | > | Making life hard for others since 1977. PGP: 4BD6C0CB | > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cd6b4a5b0810151247j1f2d83bcr2c751f9387d73c46>