From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 64F2B1384B4 for ; Mon, 4 Jan 2016 13:41:03 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2D36621C006; Mon, 4 Jan 2016 13:40:54 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 168B2E0870 for ; Mon, 4 Jan 2016 13:40:52 +0000 (UTC) Received: from pomiot (d202-251.icpnet.pl [109.173.202.251]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: mgorny) by smtp.gentoo.org (Postfix) with ESMTPSA id 151173406DD; Mon, 4 Jan 2016 13:40:49 +0000 (UTC) Date: Mon, 4 Jan 2016 14:40:36 +0100 From: =?UTF-8?B?TWljaGHFgiBHw7Nybnk=?= To: Lars Wendler Cc: Sebastian Pipping , gentoo-dev , "pr@gentoo.org" Subject: Re: [gentoo-dev] News item: Apache "-D PHP5" needs update to "-D PHP" Message-ID: <20160104144036.1083a3d1.mgorny@gentoo.org> In-Reply-To: <20160104114537.392b9971@shanghai.paradoxon.rec> References: <5689BC34.5000006@gentoo.org> <20160104114537.392b9971@shanghai.paradoxon.rec> Organization: Gentoo X-Mailer: Claws Mail 3.13.1 (GTK+ 2.24.29; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/wGOdcwLGEu34h4tV9pt8fUV"; protocol="application/pgp-signature" X-Archives-Salt: e425214e-ae4d-4e23-806f-90543b9e81f3 X-Archives-Hash: dfbf97e15efb4a6ad9fe0645e1900dd1 --Sig_/wGOdcwLGEu34h4tV9pt8fUV Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Mon, 4 Jan 2016 11:45:37 +0100 Lars Wendler wrote: > to be honest I was very upset when I first stumbled upon this problem. > And yes I only found about it when my apache webserver started to > deliver php source code instead of the real sites. > Doing such a change without getting in contact with me as apache > maintainer before the change was done is very... eh... impolite at best. Well, if this is the common outcome, then I dare say it's very bad, at least. Gentoo was never the distribution people could seriously consider stable, and it not uncommon for breakages like this to happen. But still, it's very bad if an upgrade is going to suddenly cause webserver to disclose script sources rather than running it. While of course the sole fact that this can happen is a complete disastrous design failure, we can't really do much about it or cause people to stop using such misdesigned software. Nevertheless, I think it would be reasonable to at least try to reduce the intentional breakage to bare minimum. Therefore, I think you should really work on some kind of backwards compatibility for people using '-D PHP5' that would prevent those kind of issues at least for some migration period. With big fat warnings for people who run it. --=20 Best regards, Micha=C5=82 G=C3=B3rny --Sig_/wGOdcwLGEu34h4tV9pt8fUV Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJWinZWXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2REJCMDdDQzRGMERBRDA2RUEwQUZFNDFC MDdBMUFFQUVGQjQ0NjRFAAoJELB6GurvtEZOVIIQAJJCepQ6aIksq/9vEVCJTSww qCG5u9rH+3OY9+9qm8bKpSGgir49xdnhDw3BkMaB0RK3IOXcVsA/Qhhk9TyY5e/2 RZCjOq+Td7kuWtu69ueEqzDbxewV8QVl+65aOiNSG0iE/GTACiahDvEVQ4QpUM/I UxkdcbjwfuhWn9mVPwsGV27aPbbBWBcDwOU9yGVHcRNQcR5R0rvoEtrSn+f6UPU+ /ISy7I1eVfVYyt/q9JHSXzr/Y0O2C0WjxzxfvxNhSWzqndD7pDE2lkl71BEtFiYw QZZ+aaYJCCwAUw11VYBA/46efMKPYmhq3mRBYS2z51GfWKpIgBCiPwM6VEQzyF1z 3xVFHIBabZyFOoFOzT6u9+Uqk2iUjtEnNaXDopUr2lGXAwzCZUb07uu8YC7RRtNU ki9Bp4La2bs6AZQnrsjYxB924Q1KQjMbpSOneXAPhYhZGLYjJKT0ck4/skBDxoG+ 7SOjxbkTOacyvhPxn7FfNNPtOQ9/wFgNoB4f6iic6IRPtt3rNMU9x8H/+rqB+DK8 rS2guqSh425pLsyuqQeDZDGPIWluRXc0fUtV9dlTbDVUtb5Cou248I8AwrPbCsDM JyMqAsyIRcnIPmkaH33+pfllKt1NNjv6IKzKjjsIIU20t+pe+AVt5wdOScXeFQ95 xCb4U8xG+PDQXqHc0JfF =c3F1 -----END PGP SIGNATURE----- --Sig_/wGOdcwLGEu34h4tV9pt8fUV--