Re: [Devil-linux-develop] Apache/PHP file uploads?

[Heiko Z. <he...@zu...>]

Quoting Bruce Smith <bw...@ar...>:

>> >> You can turn it off globally via menuconfig (requires are mrproper) or
>> >> for specific programs by adding
>> >> CC="gcc -fPIC -fno-stack-protector -U_FORTIFY_SOURCE -nonow -nopie" to
>> >> the make statement.
>> > Assuming that works, any idea what option(s) are most likely to solve
>> > the problem on PHP, so I can try them first?
>>
>> Try the fortify source first, then I'd play with the pie stuff
>
> OK, I tried just -U_FORTIFY_SOURCE first.  No good.
> Then I added -nopie and compiled php again.  No good.
> Then I added -fno-stack-protector.  And it worked (with all three).
>
> Then I removed the first two options and compiled with ONLY
> -fno-stack-protector.  And ... it still works.
>
> Should I check it in with only -fno-stack-protector ?
> Or is there any other options that should go with it?


No, I would just stick with that.

>> (now I'm getting hungry).
>
> <homer simpson voice>
> Ummmmm, pie ...
> </duh!>   :-)
>
> But the "pie stuff" didn't work, so NO PIE FOR YOU!  ;-)
> </variation on Seinfeld soup episode>

Oh man....

> Hey, you started it!  :-)

Yeah I have a tendency of doing things like that.

Heiko

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.