LWN.net Logo

Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds

From:  Stas Malyshev <smalyshev-AT-sugarcrm.com>
To:  Stefan Esser <stefan-AT-nopiracy.de>
Subject:  Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds
Date:  Sat, 04 Feb 2012 00:21:18 -0800
Message-ID:  <4F2CEA7E.9010906@sugarcrm.com>
Cc:  Pierre Joye <pierre.php-AT-gmail.com>, Soenke Ruempler - Jimdo <soenke-AT-jimdo.com>, PHP internals <internals-AT-lists.php.net>, "security-AT-php.net" <security-AT-php.net>, "zigo-AT-debian.org" <zigo-AT-debian.org>
Archive-link:  Article, Thread

Hi!

> what part of "all of it and I am not going to try to convince you
> about this" do you not understand?

Well, here's the answer why Suhosin is not part of PHP.

> With Suhosin existing I am free to implement as many security
> mitigations I like and do not have to beg the PHP developers to
> consider adding something.

Some people call "begging" collaboration and consider it a normal way to 
develop software with teams bigger than one person. Of course, being 
part of the team is completely voluntary. I think it is clear that 
Stefan is not interested in doing this. If somebody would want to take 
on himself working as part of PHP team on getting some features from 
Suhosin to PHP, he's welcome.
One thing I do not understand though is how it is possible to say this 
and then complain about the lack of cooperation from PHP developers. 
When we explicitly invite you to participate, and you refuse - it's 
totally OK, you have no obligations towards us. But then claim that PHP 
developers refuse to cooperate? I don't get it.
-- 
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php




(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds