Installation ./configure --enable-suhosin needs ./buildconf before

[Wikinaut]

On http://www.hardened-php.net/suhosin/how_to_install_or_upgrade.html , the ./configure instruction to compile the extension into PHP 5.3.10 does not work:

http://www.hardened-php.net/suhosin/how_to_install_or_upgrade.html says:

> [./buildconf - in case you want to compile suhosin statically]

> ./configure --with-whatever-you-want [--enable-suhosin]

> make

> make test

> make install

I downloaded http://download.suhosin.org/suhosin-0.9.33.tgz
untared to directory /php-5.3.10/ext/suhosin

php-5.3.10 # ./configure --prefix=/usr --datadir=/usr/share/php --mandir=/usr/share/man --bindir=/usr/bin --libdir=/usr/share --includedir=/usr/include --sysconfdir=/etc --with-libdir=lib64 --with-config-file-path=/etc --with-exec-dir=/usr/lib64/php/bin --with-apxs2=/usr/sbin/apxs2-prefork --with-openssl --with-bz2 --with-zlib --with-curl --with-ldap --with-mysql --with-mysqli=mysqlnd --enable-soap --enable-mbstring --with-xsl --enable-calendar --with-gd --with-iconv --with-pspell --with-gmp --with-mcrypt --enable-zip --enable-bcmath --enable-suhosin
and got at the end

Notice: Following unknown configure options were used:

--enable-suhosin

Check './configure --help' for available options

Please can you advise, or correct the text on http://www.hardened-php.net/suhosin/how_to_install_or_upgrade.html ?

[stefanesser]

I do not recommend compiling Suhosin statically.

If you want to do that than you need to do ./buildconf

Otherwise Suhosin will not be known by PHP's configure

[Wikinaut]

I do not recommend compiling Suhosin statically. (why?)

If you want to do that than you need to do ./buildconf

Ah, now I understand. Perhaps, it is better - pls. allow to suggest - that you split the page into the three different things.

• 1. The Suhosin Patch: patches your downloaded PHP (versions must match)
• 2a. The Extension (compile Suhosin Extension as an dynamically loaded extension suhosin.so for PHP; recommended)
• 2b. The Extension (compile Suhosin Extension into PHP; not recommended)

Please can you then update your page accordingly, I regard your tip as important.

Trying ./buildconf on PHP 5.3.10, it says:

You should not run buildconf in a release package.
use buildconf --force to override this check.

Why ?

[stefanesser]

You normally do not need to run ./buildconf in a release package, because that was already done by the PHP developers when packaging the software.

The problem is: running ./buildconf might require specific software versions of some build tools.

Compiling Suhosin statically means it will be impossible to disable it without recompiling PHP in case you run into a problem, or want to check if something works differently with or without Suhosin.

[Wikinaut]

Ok, thank you for detailed explanation, I agree with your view.

May I suggest, you update your hardened-php home page accordingly ?