Re: [PHP-DEV] Suhosin patch disabled by default in Debian php5 builds
Russell Coker <email@example.com> writes:
> SE Linux is supported in critical packages including the kernel,
> sysvinit, and cron. So any user who wants to use it can just install
> the SE Linux specific packages and rely on the built-in support for SE
> Linux in important base packages.
> This compares to the PHP/Suhosin situation where users who want that
> have no option other than to download the source and the Suhosin patch
> and build their own packages.
> For the analogy you want to make a better option would be GR Security
> which is not supported in the Debian kernel and won't be supported in
> the forseeable future.
Good point, thank you. That's a better analogy.
Russ Allbery (firstname.lastname@example.org) <http://www.eyrie.org/~eagle/>