Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Stuart Herbert <stuart@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1473 bytes --]

On Tuesday 18 May 2004 19:16, Marius Mauch wrote:
> And that's exactly the point about local USE flag bloat I posted a few
> days ago. Why do we need a new flag for this? 

Like I said, because they are not the same thing.  

> I would compare the 
> descriptions, but I don't find one for hardenedphp in use*.desc :(

Yup.  It seems that I forgot to commit that.  It'll be turning up shortly.

> Actually I don't see the flag anywhere (including the mod_php and php
> ebuilds).

You're looking in the wrong place.  Try the php-sapi.eclass.

> If it has to do with security enhancements I think the hardened flag
> would be a perfect match unless the Gentoo Hardened team is disagreeing
> completely (and as pappy already asked the same question I don't think
> so).

And what do we do if we add support for any of the other (and non-compatible) 
PHP security patches out there?  Renaming this USE flag would seem somewhat 
short-sighted.

I'm pro-choice, and do not agree with the idea of aggregating USE flags just 
because they sound similar.  

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
                                                   http://stu.gnqs.org/diary/

GnuPG key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]