Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:57626 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 55283 invoked from network); 2 Feb 2012 17:41:59 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 2 Feb 2012 17:41:59 -0000 Authentication-Results: pb1.pair.com header.from=pierre.php@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=pierre.php@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.170 as permitted sender) X-PHP-List-Original-Sender: pierre.php@gmail.com X-Host-Fingerprint: 209.85.160.170 mail-gy0-f170.google.com Received: from [209.85.160.170] ([209.85.160.170:57463] helo=mail-gy0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 46/97-04454-4EACA2F4 for ; Thu, 02 Feb 2012 12:41:56 -0500 Received: by ghbf18 with SMTP id f18so1449307ghb.29 for ; Thu, 02 Feb 2012 09:41:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=wHpEf+GRLMGCagxOmW5+b4FKO0U6xPnP4Z0AE13Z6W0=; b=Uu0GQgSekSjAEWmaqV4LcWb0cHkS7pPFfFqzrpfz4jh3qB5yr/CFumYR+HckX0uI3l IoEIY/TgdpOp4Jxpm3nVHpcr2dx9hGzjWjSHVS1QqHvjSgJm8eIvyiPHVJNTy+VS4PRM Fjp8vQLVwD5m+wok38IcbgjXL5lny7p5SyzjI= MIME-Version: 1.0 Received: by 10.101.10.6 with SMTP id n6mr1765349ani.48.1328204513648; Thu, 02 Feb 2012 09:41:53 -0800 (PST) Received: by 10.146.197.7 with HTTP; Thu, 2 Feb 2012 09:41:53 -0800 (PST) In-Reply-To: References: <5FB5CFDA-6FE8-4C20-A9B9-7844ED96659B@nopiracy.de> <46104CB6-A868-41C3-B8E1-F1E0AC06BCAB@nopiracy.de> Date: Thu, 2 Feb 2012 18:41:53 +0100 Message-ID: To: Stefan Esser Cc: PHP internals Content-Type: text/plain; charset=ISO-8859-1 Subject: Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds From: pierre.php@gmail.com (Pierre Joye) hi Stefan, You do not want that to happen, that's different than we, as a project, not willing to see what could be done and help you or anyone to get that done. The RFC process also makes that possible in a very easy and open way. On Thu, Feb 2, 2012 at 5:40 PM, Stefan Esser wrote: > Hello Pierre, > >> This is exactly where you should help php directly instead of doing >> what you do now to defend your patch. In the long run (or maybe even >> mid term), the Suhosin patch will disappear. > > > I seriously doubt that. The PHP developers will never ever merge all features into the PHP core. And therefore Suhosin will continue to add additonal value. > Especially since the next Suhosin-Patch for PHP 5.4.0 will already have new and more mitigations. > > > Regards, > Stefan -- Pierre @pierrejoye | http://blog.thepimp.net | http://www.libgd.org