Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:115372 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 22280 invoked from network); 8 Jul 2021 21:11:38 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 8 Jul 2021 21:11:38 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 8DB6D1804D0 for ; Thu, 8 Jul 2021 14:33:57 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,NICE_REPLY_A, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.2 X-Spam-Virus: No X-Envelope-From: Received: from mail-pf1-f176.google.com (mail-pf1-f176.google.com [209.85.210.176]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 8 Jul 2021 14:33:56 -0700 (PDT) Received: by mail-pf1-f176.google.com with SMTP id 17so6803115pfz.4 for ; Thu, 08 Jul 2021 14:33:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:references:from:subject:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=bDfJa0lDbN0sZN0ndjWiU1SSR66zLAKA+/H3pEjAmVo=; b=rVIvTPVmAQfo/JDvOAZKu2yb8BCFPk0JQcu7dnAuCBB5kuucOICKKavJ7LIutvAemE p6XN8TgKD42DdXIlJ2PvQ6iWUiS6Fy6qvtA3pUHw1H2wpgvS9KNxfIzdVPs9weY9MmPE /S32IS2mqO36fW7txwS681EB7LmfPplgSFhop9qylKI85+BLRdSTZjOaJ01fws1cVUuY thbbEutjCruQQLuLvqnFDoXrZdykFuu1ppBY7kA6rQ/WvYcsrOE3fYQevpAQuTrq5yoK PHIl8z8AhJF7yBW4KABpA9Dhmc+WigMaZSe79vnaisWR6mbqQAN/73JFTdOJvu0Z/9BD Ls4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:references:from:subject:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=bDfJa0lDbN0sZN0ndjWiU1SSR66zLAKA+/H3pEjAmVo=; b=pbiUMQRzGIkv4fO8SzU0mu7vzO+FQC8yFGEGiahOM/y90XrjLWVnOwEj+u5oi7NUXh ucyDxv7lEybFCgZEHwAlANJau24PlBi5T64fIa9idwohNYwGBx6wnpe+GF8bT/B7ILKU PKV5qt73EufIEvdat4wh5gpvUowOX45AzuzmUArmlAQC+K82peLGBTwWprb458NRLiB2 rguXPXC6VempS2h4xhWIWgI9VvJzkHsKJRBvncsqcdz1YWR4llJdpRqFoeBCNZMnvNoK PXS8DzACF9pNPLZWC8UnTmqPaTQuKNQY/gtHVpik4w3D0sQVpLJsKx2aKqaSP9NVc8Po JvIg== X-Gm-Message-State: AOAM531HIPGm02SJCVIgPwrgzvdq+NKeq9N2qPawv6mcmHmBO0jqlGLr gle27387yU67hKnsXcIUkIvQGvd9jNRD X-Google-Smtp-Source: ABdhPJzmdERnFgvpOeBbzZteY4l2Aovwc8VWuFgYtW8GJaRSrJJKINEkD6RuL+RZ7r7c/0Q8OVKKAA== X-Received: by 2002:a63:67c5:: with SMTP id b188mr32154217pgc.333.1625780035358; Thu, 08 Jul 2021 14:33:55 -0700 (PDT) Received: from Stas-Mac-3.local (ec2-44-226-30-91.us-west-2.compute.amazonaws.com. [44.226.30.91]) by smtp.gmail.com with ESMTPSA id u16sm4596440pgh.53.2021.07.08.14.33.54 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 08 Jul 2021 14:33:54 -0700 (PDT) To: internals@lists.php.net References: <5af05f50-cf90-c0f2-adb7-b70b57ca1186@gmx.de> Message-ID: Date: Thu, 8 Jul 2021 14:33:53 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: <5af05f50-cf90-c0f2-adb7-b70b57ca1186@gmx.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Subject: Re: [PHP-DEV] Re: open_basedir? From: smalyshev@gmail.com (Stanislav Malyshev) Hi! > Apparently, there has been no resolution for this issue so far. While I > don't really care about the open_basdedir directive per se, I fully > agree that we should not advertize it as security feature, and to > clearly state this in the PHP manual, as well as in our security policy. Correct. As I mentioned, de-facto it's already the case for years now. Let's fix the docs at least? Though I'd really start thinking about maybe removing it in the next major version... -- Stas Malyshev smalyshev@gmail.com