Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:57653
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain debian.org from 117.121.247.104 cause and error)
Message-ID: <4F2BBAF8.1060409@debian.org>
Date: Fri, 03 Feb 2012 18:46:16 +0800
Organization: Debian
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.16) Gecko/20111110 Icedove/3.0.11
MIME-Version: 1.0
CC: Debian Developers <debian-devel@lists.debian.org>, 
 657698 <657698@bugs.debian.org>,
 PHP internals <internals@lists.php.net>, 
 Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>
References: <CALjhHG_wYvJn-Z+x9fJUi+dgmZ+Ha9BD54N5VwhneJM4sg1xBQ@mail.gmail.com> <1328228902.3385.151.camel@fermat.scientia.net>
In-Reply-To: <1328228902.3385.151.camel@fermat.scientia.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Subject: Re: Suhosin patch disabled by default in Debian php5 builds
From: zigo@debian.org (Thomas Goirand)

On 02/03/2012 08:28 AM, Christoph Anton Mitterer wrote:
> The reasons why I've opened #657698 was just, because I though it could
> be possible for the PHP maintainers to reduce their burden, by just
> offering both, packages with suhosin and without.
> If there are bugs in the with suhosin version, they can either redirect
> people to upstream, or the no suhosin version or even (if time is
> available) try to help.
>   
I think you are under estimating how much work Ondrej has done already
in the past, and how much *more* work you are asking him to do here,
when the whole PHP team is shouting for help! Yes, adding yet another
build *is more work*, not less.

Ondrej's post is mostly motivated by his lack of time (please, Ondrej,
correct
me if I'm wrong), and the fact that for him, continuing to maintain PHP with
Suhosin is difficult and time consuming (he made few points explaining why).

If Stefan was ready to help (or someone else), both in maintaining the
patch and extension in Debian, and also help with the packaging of PHP
itself, and with bug reports, triaging and such, it would be totally
different.

But as much as I can tell, neither Stefan or anyone else seem to be willing
to make the necessary efforts.

I've bring that up with Stefan, and yet didn't receive a reply from him on
this topic.

Thomas