[gentoo-user] OK to disable filter USE in php?
I noticed amavisd-new is being pulled in by the filter USE flag in squirrelmail. I don't use amavisd-new (I greylist), so I removed filter from make.conf and then realized it is also used in the php package. I only use php with squirrelmail. Is it safe for me to remove the filter USE flag from php? I don't want to make a security mistake. - Grant
Re: [gentoo-user] OK to disable filter USE in php?
Grant emailgr...@gmail.com wrote: I noticed amavisd-new is being pulled in by the filter USE flag in squirrelmail. I don't use amavisd-new (I greylist), so I removed filter from make.conf and then realized it is also used in the php package. I only use php with squirrelmail. Is it safe for me to remove the filter USE flag from php? I don't want to make a security mistake. Why don't add mail-client/squirrelmail -filter into /etc/portage/package.use and leave the filter useflag in make.conf? So you have only the useflag for squirrelmail disabled and not for all other packages.
Re: [gentoo-user] OK to disable filter USE in php?
Grant a écrit : I noticed amavisd-new is being pulled in by the filter USE flag in squirrelmail. I don't use amavisd-new (I greylist), so I removed filter from make.conf and then realized it is also used in the php package. I only use php with squirrelmail. Is it safe for me to remove the filter USE flag from php? I don't want to make a security mistake. The filter useflag in PHP allow PHP users to filter PHP output to compress it for example, as euse -i filter shows us: xav...@xps ~ $ euse -i filter global use flags (searching: filter) no matching entries found local use flags (searching: filter) [+] filter (dev-lang/php): Add filter extension support [+] filter (mail-client/squirrelmail): Enable mail-filter/amavisd-new filtering so filter is not a global useflag, you can disable it if you do not need filter extension in php, and it is also safe. HTH. - Grant -- Xavier Parizet YaGB : http://gentooist.com GPG :DC81 6FEE 6EBE FCE4 1C18 202F E575 4A5D 036D 1408 signature.asc Description: OpenPGP digital signature
Re: [gentoo-user] OK to disable filter USE in php?
I noticed amavisd-new is being pulled in by the filter USE flag in squirrelmail. I don't use amavisd-new (I greylist), so I removed filter from make.conf and then realized it is also used in the php package. I only use php with squirrelmail. Is it safe for me to remove the filter USE flag from php? I don't want to make a security mistake. The filter useflag in PHP allow PHP users to filter PHP output to compress it for example, as euse -i filter shows us: xav...@xps ~ $ euse -i filter global use flags (searching: filter) no matching entries found local use flags (searching: filter) [+ ] filter (dev-lang/php): Add filter extension support [+ ] filter (mail-client/squirrelmail): Enable mail-filter/amavisd-new filtering so filter is not a global useflag, you can disable it if you do not need filter extension in php, and it is also safe. Thanks Xavier. I couldn't remember why I enabled it in the first place, and I thought it could have been to secure PHP. I only use PHP with squirrelmail though, so it sounds like it's alright. - Grant
