public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-user] OK to disable "filter" USE in php?
@ 2009-07-18 17:22 Grant
  2009-07-18 18:01 ` Heinz-Gerd Hombergs
  2009-07-18 18:01 ` Xavier Parizet
  0 siblings, 2 replies; 4+ messages in thread
From: Grant @ 2009-07-18 17:22 UTC (permalink / raw
  To: Gentoo mailing list

I noticed amavisd-new is being pulled in by the "filter" USE flag in
squirrelmail.  I don't use amavisd-new (I greylist), so I removed
filter from make.conf and then realized it is also used in the php
package.  I only use php with squirrelmail.  Is it safe for me to
remove the filter USE flag from php?  I don't want to make a security
mistake.

- Grant



^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [gentoo-user] OK to disable "filter" USE in php?
  2009-07-18 17:22 [gentoo-user] OK to disable "filter" USE in php? Grant
@ 2009-07-18 18:01 ` Heinz-Gerd Hombergs
  2009-07-18 18:01 ` Xavier Parizet
  1 sibling, 0 replies; 4+ messages in thread
From: Heinz-Gerd Hombergs @ 2009-07-18 18:01 UTC (permalink / raw
  To: gentoo-user

Grant <emailgrant@gmail.com> wrote:

> I noticed amavisd-new is being pulled in by the "filter" USE flag in
> squirrelmail.  I don't use amavisd-new (I greylist), so I removed
> filter from make.conf and then realized it is also used in the php
> package.  I only use php with squirrelmail.  Is it safe for me to
> remove the filter USE flag from php?  I don't want to make a security
> mistake.


Why don't add mail-client/squirrelmail -filter
into /etc/portage/package.use and leave the filter useflag in make.conf?
So you have only the useflag for squirrelmail disabled and not for all
other packages.



^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [gentoo-user] OK to disable "filter" USE in php?
  2009-07-18 17:22 [gentoo-user] OK to disable "filter" USE in php? Grant
  2009-07-18 18:01 ` Heinz-Gerd Hombergs
@ 2009-07-18 18:01 ` Xavier Parizet
  2009-07-19  5:21   ` Grant
  1 sibling, 1 reply; 4+ messages in thread
From: Xavier Parizet @ 2009-07-18 18:01 UTC (permalink / raw
  To: gentoo-user

[-- Attachment #1: Type: text/plain, Size: 1186 bytes --]

Grant a écrit :
> I noticed amavisd-new is being pulled in by the "filter" USE flag in
> squirrelmail.  I don't use amavisd-new (I greylist), so I removed
> filter from make.conf and then realized it is also used in the php
> package.  I only use php with squirrelmail.  Is it safe for me to
> remove the filter USE flag from php?  I don't want to make a security
> mistake.

The filter useflag in PHP allow PHP users to filter PHP output to compress it
for example, as euse -i filter shows us:

xavier@xps ~ $ euse -i filter
global use flags (searching: filter)
************************************************************
no matching entries found

local use flags (searching: filter)
************************************************************
[+    ] filter (dev-lang/php):
Add filter extension support

[+    ] filter (mail-client/squirrelmail):
Enable mail-filter/amavisd-new filtering

so filter is not a global useflag, you can disable it if you do not need filter
extension in php, and it is also safe.

HTH.

> - Grant

-- 
      Xavier Parizet
YaGB :   http://gentooist.com
GPG  :    DC81 6FEE 6EBE FCE4
1C18 202F E575 4A5D 036D 1408



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 261 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [gentoo-user] OK to disable "filter" USE in php?
  2009-07-18 18:01 ` Xavier Parizet
@ 2009-07-19  5:21   ` Grant
  0 siblings, 0 replies; 4+ messages in thread
From: Grant @ 2009-07-19  5:21 UTC (permalink / raw
  To: gentoo-user

>> I noticed amavisd-new is being pulled in by the "filter" USE flag in
>> squirrelmail.  I don't use amavisd-new (I greylist), so I removed
>> filter from make.conf and then realized it is also used in the php
>> package.  I only use php with squirrelmail.  Is it safe for me to
>> remove the filter USE flag from php?  I don't want to make a security
>> mistake.
>
> The filter useflag in PHP allow PHP users to filter PHP output to compress it
> for example, as euse -i filter shows us:
>
> xavier@xps ~ $ euse -i filter
> global use flags (searching: filter)
> ************************************************************
> no matching entries found
>
> local use flags (searching: filter)
> ************************************************************
> [+    ] filter (dev-lang/php):
> Add filter extension support
>
> [+    ] filter (mail-client/squirrelmail):
> Enable mail-filter/amavisd-new filtering
>
> so filter is not a global useflag, you can disable it if you do not need filter
> extension in php, and it is also safe.

Thanks Xavier.  I couldn't remember why I enabled it in the first
place, and I thought it could have been to secure PHP.  I only use PHP
with squirrelmail though, so it sounds like it's alright.

- Grant



^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2009-07-19  5:21 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-07-18 17:22 [gentoo-user] OK to disable "filter" USE in php? Grant
2009-07-18 18:01 ` Heinz-Gerd Hombergs
2009-07-18 18:01 ` Xavier Parizet
2009-07-19  5:21   ` Grant

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox