[php-maint] Bug#605571: Bug#605571: libapache2-mod-php5: Please enable pcntl functions

Raphael Hertzog hertzog at debian.org
Wed Dec 8 19:28:31 UTC 2010


Hi,

On Wed, 08 Dec 2010, sean finney wrote:
> > Unfortunately that function is only available in the -cli variant of PHP5
> > for a reason that I ignore.
> 
> well you may choose to ignore it, but we can't since we're the ones
> who would be responsible for the fall-out :)

I made no choice to ignore it, I just don't know the reason. Can it be
documented somewhere maybe?

> > You should either build this module in all variants or provide it as a plugin
> > like all other php-mysql/gd/foo packages.
> 
> unfortunately i don't think it's compilable as a module (i.e. i don't
> think there's an "=shared" option for this, it's either on or off).  if
> i'm wrong then we could maybe do this as long as it defaults to off for
> the apache flavored SAPI's and comes with a BIG FAT S3CURITY WRNING!!1!one!

So there are security concerns apparently... any specific security risk
or just the fear of letting malicious people use those functions to run
daemons where it was not intended?

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Follow my Debian News ▶ http://RaphaelHertzog.com (English)
                      ▶ http://RaphaelHertzog.fr (Français)





More information about the pkg-php-maint mailing list