* [gentoo-user] OK to disable "filter" USE in php?
@ 2009-07-18 17:22 Grant
2009-07-18 18:01 ` Heinz-Gerd Hombergs
2009-07-18 18:01 ` Xavier Parizet
0 siblings, 2 replies; 4+ messages in thread
From: Grant @ 2009-07-18 17:22 UTC (permalink / raw
To: Gentoo mailing list
I noticed amavisd-new is being pulled in by the "filter" USE flag in
squirrelmail. I don't use amavisd-new (I greylist), so I removed
filter from make.conf and then realized it is also used in the php
package. I only use php with squirrelmail. Is it safe for me to
remove the filter USE flag from php? I don't want to make a security
mistake.
- Grant
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [gentoo-user] OK to disable "filter" USE in php?
2009-07-18 17:22 [gentoo-user] OK to disable "filter" USE in php? Grant
@ 2009-07-18 18:01 ` Heinz-Gerd Hombergs
2009-07-18 18:01 ` Xavier Parizet
1 sibling, 0 replies; 4+ messages in thread
From: Heinz-Gerd Hombergs @ 2009-07-18 18:01 UTC (permalink / raw
To: gentoo-user
Grant <emailgrant@gmail.com> wrote:
> I noticed amavisd-new is being pulled in by the "filter" USE flag in
> squirrelmail. I don't use amavisd-new (I greylist), so I removed
> filter from make.conf and then realized it is also used in the php
> package. I only use php with squirrelmail. Is it safe for me to
> remove the filter USE flag from php? I don't want to make a security
> mistake.
Why don't add mail-client/squirrelmail -filter
into /etc/portage/package.use and leave the filter useflag in make.conf?
So you have only the useflag for squirrelmail disabled and not for all
other packages.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [gentoo-user] OK to disable "filter" USE in php?
2009-07-18 17:22 [gentoo-user] OK to disable "filter" USE in php? Grant
2009-07-18 18:01 ` Heinz-Gerd Hombergs
@ 2009-07-18 18:01 ` Xavier Parizet
2009-07-19 5:21 ` Grant
1 sibling, 1 reply; 4+ messages in thread
From: Xavier Parizet @ 2009-07-18 18:01 UTC (permalink / raw
To: gentoo-user
[-- Attachment #1: Type: text/plain, Size: 1186 bytes --]
Grant a écrit :
> I noticed amavisd-new is being pulled in by the "filter" USE flag in
> squirrelmail. I don't use amavisd-new (I greylist), so I removed
> filter from make.conf and then realized it is also used in the php
> package. I only use php with squirrelmail. Is it safe for me to
> remove the filter USE flag from php? I don't want to make a security
> mistake.
The filter useflag in PHP allow PHP users to filter PHP output to compress it
for example, as euse -i filter shows us:
xavier@xps ~ $ euse -i filter
global use flags (searching: filter)
************************************************************
no matching entries found
local use flags (searching: filter)
************************************************************
[+ ] filter (dev-lang/php):
Add filter extension support
[+ ] filter (mail-client/squirrelmail):
Enable mail-filter/amavisd-new filtering
so filter is not a global useflag, you can disable it if you do not need filter
extension in php, and it is also safe.
HTH.
> - Grant
--
Xavier Parizet
YaGB : http://gentooist.com
GPG : DC81 6FEE 6EBE FCE4
1C18 202F E575 4A5D 036D 1408
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 261 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [gentoo-user] OK to disable "filter" USE in php?
2009-07-18 18:01 ` Xavier Parizet
@ 2009-07-19 5:21 ` Grant
0 siblings, 0 replies; 4+ messages in thread
From: Grant @ 2009-07-19 5:21 UTC (permalink / raw
To: gentoo-user
>> I noticed amavisd-new is being pulled in by the "filter" USE flag in
>> squirrelmail. I don't use amavisd-new (I greylist), so I removed
>> filter from make.conf and then realized it is also used in the php
>> package. I only use php with squirrelmail. Is it safe for me to
>> remove the filter USE flag from php? I don't want to make a security
>> mistake.
>
> The filter useflag in PHP allow PHP users to filter PHP output to compress it
> for example, as euse -i filter shows us:
>
> xavier@xps ~ $ euse -i filter
> global use flags (searching: filter)
> ************************************************************
> no matching entries found
>
> local use flags (searching: filter)
> ************************************************************
> [+ ] filter (dev-lang/php):
> Add filter extension support
>
> [+ ] filter (mail-client/squirrelmail):
> Enable mail-filter/amavisd-new filtering
>
> so filter is not a global useflag, you can disable it if you do not need filter
> extension in php, and it is also safe.
Thanks Xavier. I couldn't remember why I enabled it in the first
place, and I thought it could have been to secure PHP. I only use PHP
with squirrelmail though, so it sounds like it's alright.
- Grant
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2009-07-19 5:21 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-07-18 17:22 [gentoo-user] OK to disable "filter" USE in php? Grant
2009-07-18 18:01 ` Heinz-Gerd Hombergs
2009-07-18 18:01 ` Xavier Parizet
2009-07-19 5:21 ` Grant
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox