Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds
[Posted February 8, 2012 by jake]
| From: |
| Stas Malyshev <smalyshev-AT-sugarcrm.com> |
| To: |
| Stefan Esser <stefan-AT-nopiracy.de> |
| Subject: |
| Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds |
| Date: |
| Sat, 04 Feb 2012 00:21:18 -0800 |
| Message-ID: |
| <4F2CEA7E.9010906@sugarcrm.com> |
| Cc: |
| Pierre Joye <pierre.php-AT-gmail.com>,
Soenke Ruempler - Jimdo <soenke-AT-jimdo.com>,
PHP internals <internals-AT-lists.php.net>,
"security-AT-php.net" <security-AT-php.net>,
"zigo-AT-debian.org" <zigo-AT-debian.org> |
| Archive-link: |
| Article, Thread
|
Hi!
> what part of "all of it and I am not going to try to convince you
> about this" do you not understand?
Well, here's the answer why Suhosin is not part of PHP.
> With Suhosin existing I am free to implement as many security
> mitigations I like and do not have to beg the PHP developers to
> consider adding something.
Some people call "begging" collaboration and consider it a normal way to
develop software with teams bigger than one person. Of course, being
part of the team is completely voluntary. I think it is clear that
Stefan is not interested in doing this. If somebody would want to take
on himself working as part of PHP team on getting some features from
Suhosin to PHP, he's welcome.
One thing I do not understand though is how it is possible to say this
and then complain about the lack of cooperation from PHP developers.
When we explicitly invite you to participate, and you refuse - it's
totally OK, you have no obligations towards us. But then claim that PHP
developers refuse to cooperate? I don't get it.
--
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227
--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php
(
Log in to post comments)