Christoph Anton Mitterer
calestyo at scientia.net
Sun Jan 29 21:36:00 UTC 2012
I cannot read the those threads right now, as alioth is down... but
On Sun, 2012-01-29 at 09:47 +0100, Ondřej Surý wrote:
> The PHP team is undermanned for a very long time
Well I don't wanna tell you how to do your job ;-) ... but wouldn't it
then be better to rather drop some other PHP related parts (not so much
used packages or so)?
IMHO suhosin is really important as it's quite relevant for security.
> For other reasons see f.e.:
Well I know about such complains but usually suhosin disables things for
good reasons, or you can tell it not to do so.
With respect to the performance arguments,... well ideally one should
probably have the choice (with php with suhosin patch, being the
default), but if not, one should rather let people build their own PHP
packages without suhosin, given the expectation that they know what
they're doing, than the other way round.
Were there any troubles in applying the suhosin core patch to PHP? So is
it "just" a matter of making the php5 source package produce binaries
for both -with-suhosin and no-suhosin?
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 5677 bytes
Desc: not available
More information about the pkg-php-maint