Re: [gentoo-dev] Hardened PHP now in Gentoo

[Max Kalika]

Quoting Tom Payne <twp@g.o>:

> Ooops, my bad. Thanks for the clarification. I guess I'm trying to work
> out "if I want hardened gentoo, do I always want hardened php?" and vice
> versa, as would be implied by the two having the same USE flag. To me,
> hardening the system vs. hardening a web scripting language are two
> separate things (i.e. you could want one without the other) but I haven't
> yet come up with a convincing argument for this :-)

It's not too different than saying "do I want ssl support in postfix and
not in php?"  In either case, if you want a certain package to disable a
global USE flag, just plop the following into /etc/portage/package.use

  >=dev-php/php-4*     -hardened

-- 
max kalika
 .. public key:   http://www.gentoo.org/~max/max.asc
 .. fingerprint:  2D59 74B5 8785 3C22 74F2 87B0 6DD4 E810 CBC3 AB79