Re: Hardened PHP? Suhosin patch?

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--==============23820914=Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="------------enig3EF43F7BDBD0E3903E602C08"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig3EF43F7BDBD0E3903E602C08
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Niki Kovacs wrote:
> Hi,
>
> I'm running a few PHP-based apps on our server (PMB, SPIP, Joomla,
> PHPMyAdmin), and I'm not always comforted about security. I don't know
> the details, but many a security expert frowns when it comes to PHP.
>
> Now I just stumbled over this:
>
> http://www.hardened-php.net/suhosin.127.html
>
> Has anyone already tried this out? An opinion about it? Is it worth it?
>
> Since I have to rebuild PHP anyway (because I need some specific modules
> that can only be obtained by rebuilding it), it wouldn't be much of a
> hassle. But I'm curious about the experts' opinion here.
>

http://www.hughesjr.com/content/view/21/1/

That explains how to install in centos-4 and centos-5.

Thanks,
Johnny Hughes


--------------enig3EF43F7BDBD0E3903E602C08
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"