similar to: Question regarding hardened-php

Hi, I'm running a few PHP-based apps on our server (PMB, SPIP, Joomla, PHPMyAdmin), and I'm not always comforted about security. I don't know the details, but many a security expert frowns when it comes to PHP. Now I just stumbled over this: http://www.hardened-php.net/suhosin.127.html Has anyone already tried this out? An opinion about it? Is it worth it? Since I have to

Hi list, Is there suhosin patched php 5.2+ available for centos 6? -- Eero

I got some problem with wine (since wine 1.1.13) on hardened-sources ... actually using ... kernel -> 2.6.28-hardened-r7 #1 SMP Mon Apr 6 17:41:50 CEST 2009 x86_64 gcc -> x86_64-pc-linux-gnu-3.4.6-hardened Code: __bb_init_func': preloader.c:(.text+0x4f): undefined reference to `__guard' preloader.c:(.text+0x70): undefined reference to `__stack_smash_handler' preloader.o: In

Hi, I am running nut with megatec driver accessing ttyS0 as user nut on "standard" kernel (gentoo-sources). It works fine. However, I just built a hardened kernel on a new gentoo machine and have no experience with it. NUT (upsdrv) is failing because it says it doesn't have permission to access ttyS0 even though nut is within the appropriate group. I can add user = root in ups.conf

Installed R-devel 3.2.3 on a vanilla F23 box. Installing any package with C code fails with: gcc: error: /usr/lib/rpm/redhat/redhat-hardened-cc1: No such file or directory This parameter originates from R's CFLAGS: $ R CMD config CFLAGS -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches

All, I have just put 3 versions of php-suhosin-0.9.20 in the Testing repository for various versions of CentOS. From the Suhosin website: Suhosin is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core. More Suhosin info: http://www.hardened-php.net/suhosin/ Suhosin Configuration:

Can anyone recommend a hardened CentOS distro?

On Fri, Jan 15, 2016 at 2:45 PM, Michael Smith <my.r.help at gmail.com> wrote: > > dnf install redhat-rpm-config I used: yum install /usr/lib/rpm/redhat/redhat-hardened-cc1 And that did the job, however it seems to me this should be a formal dependency of the R-base rpm package.

In the rgdal package, configure.ac has had : ${LDFLAGS=`"${RBIN}" CMD config LDFLAGS`} at least since 2012, so picking up LDFLAGS known to the R version installed. Very recently, users installing rgdal from source with R installed from RPM are seeing problems, such as those reported in this thread: https://stat.ethz.ch/pipermail/r-sig-geo/2020-June/028251.html The diagnosis by

On Mon, 29 Jun 2020 at 11:24, I?aki Ucar <iucar at fedoraproject.org> wrote: > > On Mon, 29 Jun 2020 at 10:21, Roger Bivand <Roger.Bivand at nhh.no> wrote: > > > > In the rgdal package, configure.ac has had : ${LDFLAGS=`"${RBIN}" CMD > > config LDFLAGS`} at least since 2012, so picking up LDFLAGS known to the R > > version installed. Very

Hi List, I have been using the php 5.2.10 from the testing repo and note the following: the php-suhosin packages in testing do not match the php version > PHP Warning: PHP Startup: suhosin: Unable to initialize module > Module compiled with module API=20050922, debug=0, thread-safety=0 > PHP compiled with module API=20060613, debug=0, thread-safety=0 Also, does anyone know of a rpm

Hi there -- Is there a repository that has php version 5.2 or greater available for use with the Centos 5.3 distribution? This includes the development libraries package. Thanks. The information in this e-mail is intended only for the person to whom it is addressed. If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Partners

Because of a Fedora bug in libtool[1], some libguestfs tarballs that I built contain a hard-coded path to a 'redhat-hardened-ld' linker script inside libtool. You will find that on non-Fedora/RHEL/CentOS platforms, the build will fail with an error similar to this: gcc: error: /usr/lib/rpm/redhat/redhat-hardened-ld: No such file or directory The affected tarballs are:

Hi, # uname -a Linux obfuscated.example.com 2.6.18-128.4.1.el5 #1 SMP Tue Aug 4 20:23:34 EDT 2009 i686 i686 i386 GNU/Linux I noticed a few days ago that I'm not getting my logwatch emails to the root account any longer, and while I've definitely been applying updates from base, no other changes have happened on this box. I ran logwatch at the command line: logwatch --detail medium

Hi, Microsoft some time ago introduced Hardened UNC Paths, and in April published the Badlock security fixes, which seem to be related to that. Samba at the same time published versions 4.4.1 (and 4.4.2). Even after reading the release notes of Samba 4.4.1 several times, I still do not know whether I must manually adjust smb.conf to be protected from these vulnerabilities. What I do know is

Has anyone experienced any issues with Samba (3.0.24-r3), specifically with ADS domain joins, running on Hardened Gentoo 2007.0 (kernel 2.6.21 / AMD64)? I get "CLDAP Request Failed" error messages when attempting to do a net ads join, which has been successful with numerous other systems. This is familiar territory for us and a new issue never seen before. Thanks.

On Mon, 29 Jun 2020 at 10:21, Roger Bivand <Roger.Bivand at nhh.no> wrote: > > In the rgdal package, configure.ac has had : ${LDFLAGS=`"${RBIN}" CMD > config LDFLAGS`} at least since 2012, so picking up LDFLAGS known to the R > version installed. Very recently, users installing rgdal from source with > R installed from RPM are seeing problems, such as those reported

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: banner.gif Type: image/gif Size: 8818 bytes Desc: not available Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20041231/593be1e1/banner.gif

We're running Fedora Core and Samba-3.0.8-0.pre1.3 and we're authenticating our Windows XP users against Active Directory running on Windows 2003. Everything works fine! But now we're trying to secure and harden our WinXP machines and now when any user logged into a secured WinXP they get the errormessage "The account is not authorized to log in from this station". I browsed

HI folks, Apologies if this is OT. If it is, please msg me offllist and I'll carry on my searching elsewhere. Where does mysql actually store databases and tables in the filesystem? Thanks in advance -Ray