Suhosin and Debian

[John Connor]

I was reading about installing LAMP in Debian and apparently the comments say php5-suhosin was removed in Debian 7. Does that mean the newest Debian has better or some other php protection mechanisms like Suhosin?

 

[lxskllr]

Looks like development stopped for awhile, so it got pulled. You can get it from sid, but it looks like it doesn't have all the dependencies. You should be able to build it from source.

https://packages.debian.org/sid/php5-suhosin

edit:
doesn't seem to work yet...

The issue tracker will be available once Suhosin7 can actually be compiled.

https://github.com/sektioneins/suhosin7

 

[John Connor]

So I guess chose a different OS that has Suhosin?

 

[lxskllr]

So I guess chose a different OS that has Suhosin?

None of them will. There is no suhosin until they get the code ported to the new php.

 

[John Connor]

That's odd because my host uses Suhosin. Maybe they use an older version of Linux.

 

[lxskllr]

That's odd because my host uses Suhosin. Maybe they use an older version of Linux.

could be. redhat or centos?

 

[John Connor]

I'm not sure. I'll have to ask my host now. Hope they have the OS patched.

 

[zokudu]

Can you not grab the php5 source from here and build it?

https://suhosin.org/stories/download.html

Seems to compile fine for me.

 

[John Connor]

That looks promising. Thx.

 

[zokudu]

It also looks like Suhosin runs Debian repos themselves.

https://suhosin.org/stories/install.html